Skill UI

A comprehensive guide for developers on building secure and robust APIs across REST, GraphQL, and WebSocket protocols. It covers essential security patterns including robust authentication (JWT, OAuth 2.0), granular authorization (RBAC), input validation to prevent injection attacks (SQLi, XSS), rate limiting, and best practices for data encryption and secure headers. Essential for developers preparing for security audits.

Implements enterprise-grade Role-Based Access Control (RBAC) for Apollo.io API integrations. This skill is essential for managing team permissions, ensuring data segregation, and implementing robust security controls by proxying API calls. It defines granular roles (Viewer, Analyst, Admin) and maps specific API operations to required permissions, preventing all-or-nothing key usage.

A comprehensive guide covering advanced offensive techniques for AWS cloud environments. Techniques include detailed IAM enumeration, privilege escalation paths, SSRF exploitation targeting metadata endpoints (IMDSv1/v2), S3 bucket exploitation, and Lambda function code extraction. Essential for security professionals and red team operations conducting authorized cloud vulnerability assessments.

Utilize the Azure Key Vault Keys Java SDK to perform comprehensive key lifecycle management and cryptographic operations. This guide covers creating, retrieving, updating, and deleting various key types (RSA, EC, Symmetric) in both standard Azure Key Vault and Managed HSM. It demonstrates key operations such as encryption, decryption, signing, and verifying data using Java.

This SDK provides comprehensive Java support for managing secrets within Azure Key Vault. It enables developers to securely store, retrieve, update, list, delete, and recover sensitive configuration data, such as API keys, database passwords, and connection strings. It is essential for building secure, production-ready applications that comply with best security practices.

Search, filter, and extract data from Burp Suite .burp files via the burpsuite-project-file-parser CLI wrapper, letting you fetch targeted headers, audit findings, or traffic snippets without loading the GUI when hunting for security issues.

This skill provides a comprehensive checklist for performing rigorous code security reviews. It covers critical areas such as secrets management, input validation, preventing SQL injection, secure authentication (JWT, RLS), and mitigating XSS/CSRF vulnerabilities. Essential for developers building features that handle sensitive data or user input.

An expert developer specializing in secure backend coding practices, vulnerability mitigation, and robust API design. Proficient in preventing common attacks such as SQL injection, XSS, and CSRF. Covers comprehensive areas including input validation, authentication mechanisms (OAuth 2.0, MFA), database security, and implementing necessary security headers (CSP, HSTS) for building secure-by-design applications. Ideal for implementing security fixes or building new, hardened backend services.

This guide details security best practices for integrating with Clay. It covers securing API keys, validating webhook signatures, isolating provider credentials, and redacting sensitive PII data. Essential for maintaining compliance and data integrity in production environments.

Automates CodeQL database builds, suite selection, and taint-aware scans to surface security and quality issues across supported languages, handling output directories, SARIF results, and extensions in one workflow.

This skill provides a comprehensive guide to configuring CodeRabbit for advanced, security-focused code reviews. It teaches how to implement rules for detecting hardcoded secrets, common vulnerabilities (like SQL injection and XSS), and enforcing secure coding standards across APIs, databases, and infrastructure code. Use this when hardening a codebase's security posture or ensuring compliance with industry standards.

This framework provides comprehensive compliance and security auditing for Cursor IDE usage. It covers major regulations like SOC 2, GDPR, and HIPAA, guiding users through detailed checklists, evidence collection, and remediation steps. It is essential for enterprise teams requiring robust data governance and adherence to strict industry standards.