Skill UI

Provides authentication, authorization, encryption, secrets, and hardening patterns for designing secure auth flows, managing tokens, configuring CORS, and implementing best practices around API keys, JWT, OAuth, and rate limiting.

Automates guidance for sorting parameter handlers in API development, covering REST, GraphQL, OpenAPI, authentication, and design patterns, with step-by-step best practices and production-ready validation.

Guides Java engineers through Spring Boot backend architecture, REST API design, service layering, repository patterns, caching, async handlers, logging, middleware, and resilience practices for scalable production services.

This skill provides systematic patterns and best practices for transforming slow database queries into lightning-fast operations. It covers advanced topics such as proper indexing strategies, detailed query plan analysis (EXPLAIN), resolving common issues like N+1 problems, and designing highly performant database schemas. Use this when debugging performance bottlenecks, improving application response times, or ensuring scalability for growing datasets.

This skill facilitates systematic threat identification by applying the STRIDE methodology (Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege). It is crucial for conducting comprehensive security analyses, performing threat modeling sessions on new or existing system architectures, and creating robust security documentation. Use it when reviewing design decisions, preparing for compliance audits, or training teams on advanced threat identification techniques.

This skill guides the creation of robust, production-ready design systems leveraging the power of Tailwind CSS. It covers foundational aspects such as implementing design tokens, managing component variants, ensuring responsive patterns, and achieving high accessibility standards. Use it when building component libraries, standardizing UI patterns, or migrating/extending existing Tailwind CSS setups, including dark mode support.

This skill generates comprehensive Technical Design Documents (TDDs), guiding users through structuring architectural decisions, implementation plans, and risk assessments. It follows industry best practices from standards like Google Design Docs, RFC patterns, and ADRs. It focuses on high-level contracts and architectural 'what' and 'why', rather than specific, low-level implementation code.

Master the art of building highly functional and delightful Telegram bots. This guide provides deep expertise in the Telegram ecosystem, covering bot architecture design, command structuring, advanced inline keyboard patterns, and monetization strategies (Freemium, Subscriptions). Learn best practices for user onboarding, error handling, and scaling your bot from prototype to profitable, natural-feeling assistant.

Production-ready guidance on adopting Http.ai SDK design patterns for TypeScript and Python, covering singleton clients, safe wrappers, retries, and validation to standardize Vast.ai integrations and improve API reliability.

Automated versioning strategy helper that activates on API development requests, guiding best practices, code/config generation, and validation for REST, GraphQL, OpenAPI, authentication, and API design patterns.

Guidelines for reviewing UI code against web interface best practices, covering accessibility, performance, responsive design, component patterns, CSS practices, security, and internationalization during audits or UX evaluations.

Automates guidance for designing and deploying webhook senders, covering integration patterns, SDK generation, and production-ready configurations.