Skill UI

This skill provides a comprehensive framework for conducting high-quality code reviews. It guides developers through checking code across four critical dimensions: Correctness (functional accuracy and edge cases), Maintainability (readability and documentation), Performance (efficiency and resource usage), and Security (input validation and vulnerability management). It also emphasizes providing actionable, constructive, and empathetic feedback.

Provides comprehensive security guidelines and code patterns for integrating with the Fathom API. This module covers critical security concerns such as API key management, webhook signature verification, PII (Personally Identifiable Information) redaction, and robust input validation. It ensures compliance and protects highly sensitive meeting transcripts and confidential business data in production environments.

A comprehensive guide for securing highly sensitive fundraising and investor data managed within the Finta platform. This document covers critical security best practices, including secure API key management, webhook signature verification, robust input validation using libraries like Zod, and techniques for data redaction to prevent leaks. Essential for developers building integrations that handle confidential financial terms, valuations, and investor contact information.

This skill provides comprehensive best practices for securing highly sensitive financial and tax data processed by SaaS platforms, such as handling SSNs, EINs, and bank details. It covers critical security mechanisms including API key lifecycle management, webhook signature verification (HMAC), robust input validation (Zod), and PII redaction to ensure compliance with standards like SOC 2 and industry best practices.

This comprehensive guide details essential security practices for deploying WebContainers. It covers implementing Content Security Policy (CSP) headers, ensuring robust sandbox isolation, and performing rigorous input validation to mitigate common web vulnerabilities. Use this when developing applications with WebContainers or the StackBlitz SDK.

This guide covers essential security best practices for utilizing Together AI's OpenAI-compatible API for inference, fine-tuning, and model deployment. It provides code examples and architectural advice on secure API key management, robust webhook signature verification, input validation using schemas (like Zod), and implementing data redaction pipelines to protect sensitive information in logs and datasets. Essential for building secure AI applications.

This module provides a comprehensive set of abstractions and hooks for developing complex web forms, primarily for administrative interfaces. It includes tools for field rendering, form state management (using hooks like useForm and useBind), field building utilities (FieldBuilder), and robust data validation mechanisms. It significantly simplifies the process of creating data-driven and interactive user input forms.

A comprehensive guide detailing best practices for securing Quarkus applications. It covers robust authentication methods like JWT and OIDC, role-based access control (RBAC) for authorization, mandatory input validation using Bean Validation, preventing SQL injection, and secure secret management. Essential for developers building highly secure Java microservices.

Provides a comprehensive, step-by-step workflow for developers to integrate new Azure Backup commands into the Azure Backup MCP toolset. It covers the entire development lifecycle, including option definition, service implementation, command logic, command registration, input validation, writing unit tests, and executing live/recorded tests, ensuring high quality and adherence to best practices before PR submission.

This skill enforces a rigorous data validation protocol by establishing hard boundaries at every point data enters the system (API requests, user input, environment variables, webhooks, etc.). It mandates a four-phase process: detection, trust classification, mandatory filtering (schema validation, sanitization, type checking), and final verification. This prevents untrusted data from reaching core business logic, mitigating risks like SQL injection and XSS.

A comprehensive guide detailing best practices for securing Laravel applications. Covers critical areas including robust authentication and authorization (Policies, Sanctum), input validation (Form Requests), mitigating common vulnerabilities like XSS, CSRF, and SQL injection, and implementing secure deployment configurations.

This comprehensive guide covers security best practices for building robust Quarkus applications. It details how to implement secure authentication (JWT, OIDC), role-based authorization (RBAC), robust input validation (Bean Validation), and advanced protection against vulnerabilities like SQL injection and CSRF. Essential for securing resource access and managing application secrets.