Skill UI

This guide provides expert architectural patterns for implementing robust authentication using Clerk in Next.js 14/15 App Router. It covers essential setups like ClerkProvider, middleware route protection (including role/permission checks), and accessing user data in Server Components and Server Actions. Ideal for building secure, scalable, and enterprise-grade web applications.

Learn how to configure and implement robust backend endpoints to handle webhooks from Clerk. This guide covers processing user lifecycle events (creation, update, deletion) and organization events, ensuring seamless data synchronization to your external database. It emphasizes secure practices like Svix signature verification and idempotency protection.

This expert tool automates compliance checks for EU GDPR and German DSGVO. It scans codebases for privacy risks (PII, special data), generates formal Data Protection Impact Assessments (DPIA), and manages the entire lifecycle of Data Subject Access Requests (DSARs), ensuring adherence to strict legal deadlines. Ideal for privacy audits and compliance planning.

Generates and implements backup strategies for databases and applications, producing configuration files and automation scripts that ensure secure, scalable protection and disaster recovery readiness across platforms.

This guide provides comprehensive security best practices for integrating with the Juicebox API. It covers critical areas such as secure API key management (using secrets managers), robust webhook signature verification, input validation using schemas, and essential data protection techniques like PII redaction. It ensures compliance with global regulations like GDPR and CCPA when handling sensitive professional and contact data.

A specialized security auditor for Laravel applications. It analyzes code, APIs, and configurations against OWASP standards to detect vulnerabilities such as XSS, IDOR, SQL injection, and misconfigurations. Ideal for reviewing backend logic to ensure robust data protection and authorization.

This skill provides comprehensive patterns for handling sensitive data when integrating with Mistral AI. It covers PII redaction (emails, phone numbers, etc.), implementing data retention policies, and enforcing compliance with global privacy regulations like GDPR and CCPA. Key features include safe API wrappers, dataset sanitization for fine-tuning, and conversation history management with TTL and user erasure rights.

This expert specializes in secure mobile development practices, covering areas like input validation, WebView security, secure data storage (KeyStore/Keychain), and advanced network security (Certificate Pinning). Use this skill to write secure, resilient mobile code for both iOS and Android, mitigating platform-specific vulnerabilities and ensuring sensitive data protection.

This guide provides robust, production-ready strategies for integrating with the PostHog API. It teaches developers how to handle API rate limits (429 errors) gracefully using exponential backoff and retry logic. Furthermore, it covers implementing request queuing for burst protection, optimizing with data caching, and monitoring rate limit headers, ensuring stable and reliable data ingestion regardless of traffic volume.

Implements a robust, enterprise-grade Role-Based Access Control (RBAC) system for Supabase. This skill teaches how to store custom roles (e.g., admin, editor, viewer) in JWT claims (`app_metadata`), enforce granular permissions, and scope access at the row level using PostgreSQL RLS policies. It covers organization scoping, role hierarchy management, and API key protection.

A comprehensive guide to integrating privacy protections into software architecture from the ground up. This skill ensures compliance with major global regulations like GDPR, CCPA, and LGPD by implementing core principles such as data minimization, purpose limitation, and default privacy settings. Essential for developers building any application that handles personal user data.

A powerful toolkit utilizing Objection and Frida for authorized mobile penetration testing. It enables deep runtime analysis of iOS applications, allowing users to inspect sensitive data in the keychain, filesystem, and memory. Key capabilities include bypassing client-side protections such as SSL pinning and jailbreak detection without requiring source code access.