Skill UI

A comprehensive guide maintained by Supabase for optimizing Postgres performance. It provides critical rules and best practices across query performance, schema design, connection management, and security (including RLS). Use this skill when writing, reviewing, or optimizing complex SQL queries, database schemas, or configurations to ensure optimal database health and performance.

Quick reference of PostgreSQL best practices covering indexing cheatsheets, data type choices, security policies, and configuration templates to guide optimization and troubleshooting workflows.

Comprehensive guide to managing data securely in Replit applications. This skill covers three core storage systems: PostgreSQL for structured data and complex queries; Replit KV Database for caching and session management; and Object Storage for file uploads and blobs. Learn best practices including parameterized queries, TTL implementation, and secure data access patterns.

A comprehensive guide detailing security best practices for building and deploying applications on the Replit platform. Learn how to properly manage sensitive data using Replit Secrets (AES-256 encryption), implement secure service-to-service authentication via REPL_IDENTITY tokens, validate custom headers, and prevent common vulnerabilities like hardcoded API keys and SQL injection. Essential for auditing and securing production environments.

A comprehensive tool for detecting critical API security vulnerabilities, including injection, broken authentication (BOLA), excessive data exposure, and mass assignment. It audits endpoints against the OWASP API Security Top 10 standards by analyzing source code, middleware chains, and request validation logic. Ideal for pre-deployment security gates, CI/CD integration, and compliance audits.

Performs OWASP-guided security scans on PostgreSQL and MySQL databases via the database-security-scanner plugin, identifying weak passwords, SQL injection risks, and misconfigurations while generating reports and remediation advice.

This skill generates a comprehensive, minimal, and enforceable security policy document (Blue Book) for applications handling sensitive data. It structures requirements using MUST/SHOULD/CAN language, explicitly defining assumptions, scope, threat models, and security gates. It is essential for establishing clear security guardrails and ensuring compliance early in the development lifecycle.

Provides comprehensive security review guidance for authentication, input handling, secrets, APIs, and payment-sensitive workflows, with actionable checklists covering secrets, validation, SQL injection, auth, XSS, CSRF, rate limits, and sensitive data handling.

Provides a comprehensive guide and code examples for configuring Sentry across development, staging, and production environments. It ensures data isolation by using separate DSNs, allows tuning of sample rates (e.g., 10% for production, 100% for dev), and implements environment-specific logic for PII scrubbing and event filtering, optimizing visibility while maintaining data security.

This comprehensive guide details how to harden Sentry's security posture and ensure compliance with regulations like GDPR. It covers best practices for managing sensitive data, implementing PII scrubbing, and configuring `beforeSend` hooks to automatically redact sensitive information such as passwords, API keys, tokens, IP addresses, and emails from client-side and server-side events.

Provides step-by-step guidance on technical SEO, on-page metadata, structured data, URLs, sitemaps, and security headers to improve visibility as per Lighthouse and Google SEO guidelines.

This guide outlines essential security best practices for integrating the Speak API. It covers critical areas like securing API keys using secrets managers, ensuring audio data privacy by deleting local files, and maintaining compliance with major regulations such as COPPA and FERPA. Use this knowledge when building production-ready, secure language learning applications.