Skill UI

A comprehensive guide to optimizing Sentry's performance monitoring pipeline. Learn how to minimize SDK overhead and event costs while maximizing signal quality. Techniques covered include replacing static sampling rates with dynamic `tracesSampler`, configuring profiling rates, preventing cardinality explosion through proper transaction naming, and implementing custom measurements for deeper business logic visibility. Essential for high-traffic, production applications.

This framework enforces organizational governance and policy guardrails for Sentry usage. It standardizes configuration across services, mandatorily scrubbing PII, enforcing naming conventions, and managing trace rate caps based on service criticality. It integrates into CI/CD to prevent compliance drift and ensure adherence to standards like GDPR and HIPAA.

A comprehensive guide to managing Sentry's event volume, quotas, and rate limits. Learn how to prevent 429 Too Many Requests errors and control costs by implementing client-side sampling (sampleRate/tracesSampleRate), using beforeSend filters to drop noisy errors, and understanding various quota types (Errors, Transactions, Replays). Essential for high-volume, cost-sensitive applications.

This comprehensive guide details how to harden Sentry's security posture and ensure compliance with regulations like GDPR. It covers best practices for managing sensitive data, implementing PII scrubbing, and configuring `beforeSend` hooks to automatically redact sensitive information such as passwords, API keys, tokens, IP addresses, and emails from client-side and server-side events.

Guides engineers through setting up Server Sent Events connections as part of API integration work, providing best practices, sample configurations, and validated code for third-party webhooks, SDKs, and OAuth flows.

A specialized methodology for reviewing APIs, configuration schemas, and interfaces to identify 'footguns'—design choices where the path of least resistance leads to insecurity. This analysis focuses on making secure usage the default, covering topics like dangerous defaults, primitive vs. semantic type safety, and insecure algorithm selection. It is crucial for architects and reviewers to prevent developer misuse at the design level.

Provides a comprehensive guide and framework for building robust, production-grade Slack applications. Utilizes the recommended Bolt framework to handle authentication, event routing, and request verification across Python, JavaScript, and Java. Covers advanced topics like interactive UI design using Block Kit, implementing slash commands, managing OAuth flows, and integrating with Workflow Builder. Ideal for developers building sophisticated, enterprise-level team communication tools.

This skill guides the mastery of smart contract security best practices for Solidity. It is essential for writing robust, secure, and efficient contracts, auditing existing code for common vulnerabilities (such as reentrancy, overflow, and access control issues), and implementing secure DeFi protocols. It focuses on preventing common attack vectors while optimizing gas usage.

This skill provides a comprehensive guide for developers to configure and verify webhooks for the Speak language learning platform. It addresses handling critical lifecycle events, including lesson completion, progress tracking, and achievement notifications. Use this when building production-ready integrations or managing enterprise-level data synchronization from Speak's API.

This skill provides detailed guidance on authoring effective `specs.md` files for autonomous development workflows. It teaches users how to clearly define sprint goals, establish explicit scope boundaries (In/Out of Scope), and configure rigorous testing requirements (QA, UI Testing). This ensures that agentic development remains focused and prevents scope creep.

This skill guides the setup of a robust, multi-environment architecture for Supabase, ensuring complete data isolation between development, staging, and production projects. It covers best practices for managing separate environment-specific secrets, safe database migration promotion (db push), environment-aware client initialization, and implementing safeguards to prevent accidental cross-environment operations in production. Essential for scaling SaaS applications.

A comprehensive guide to building event-driven architectures using Supabase. It covers four core event mechanisms: Database Webhooks (pg_net), Postgres LISTEN/NOTIFY, Edge Function HTTP calls, and Realtime subscriptions. Includes production-ready SQL triggers, signature verification logic, and best practices for handling data changes (INSERT, UPDATE, DELETE) as external HTTP events.