Skill UI

Overview of secure authentication and authorization patterns covering JWT access/refresh flows, middleware enforcement, OAuth2 PKCE login, RBAC permissions, and anti-patterns/checklists for modern web apps.

Overview of secure authentication and authorization patterns covering JWT access/refresh flows, middleware enforcement, OAuth2 PKCE login, RBAC permissions, and anti-patterns/checklists for modern web apps.

Provides GitHub Actions and GitLab CI pipeline templates with lint, test, and deploy stages, reusable setup actions, matrix strategies, and anti-pattern checklists for reliable automation.

This skill automatically generates comprehensive and highly structured Pull Request (PR) descriptions directly from Git diffs. It goes beyond simple summaries by automatically adding detailed change categories (e.g., source, test, config), security risk assessments, and required review checklists based on the modified file types. Use this when submitting complex code changes or when the diff is large and requires explicit structure for thorough review.

Provides targeted guidance for improving LCP, INP, and CLS to boost page experience and search rankings, with checklists, issue breakdowns, and actionable fixes for rendering and interaction bottlenecks.

This framework provides comprehensive compliance and security auditing for Cursor IDE usage. It covers major regulations like SOC 2, GDPR, and HIPAA, guiding users through detailed checklists, evidence collection, and remediation steps. It is essential for enterprise teams requiring robust data governance and adherence to strict industry standards.

Guides creation of Cursor-specific subagents with isolated contexts, structured prompts, and frontmatter so multi-step workflows, verifiers, or specialists follow Cursor’s directories and delegation rules.

Guides engineers through selecting software architecture patterns, structuring projects, and documenting trade-offs via checklists, decision frameworks, and validation steps for system design conversations or new projects.

This comprehensive workflow manages the entire lifecycle of notes within Evernote. It provides structured methods for creating new notes (supporting plain text, checklists, and ENML formatting), retrieving existing content, updating notes, and organizing both notes and notebooks/stacks. Essential for building full-featured note-taking applications and content management systems.

A comprehensive guardrail system for external search APIs (like Exa). It enforces content safety policies, manages domain access via allow/blocklists, sanitizes queries to prevent misuse, implements result freshness checks, and enforces per-user usage quotas. Essential for building reliable, secure, and cost-controlled integrations.

This comprehensive guide details essential security practices for integrating the Exa API. It covers key areas such as secure API key management using environment variables, implementing content moderation to filter unsafe results, restricting results via domain allow/block lists, and sanitizing user queries to prevent injection attacks. Use this when hardening or auditing an Exa-powered application.

This skill provides robust, automated guardrails for web scraping pipelines using Firecrawl. It enforces critical policies to ensure compliance and stability, including domain blocklists (preventing scraping prohibited sites), managing API credit budgets, filtering low-quality content (e.g., error pages, thin content), and implementing granular per-domain rate limiting. Use this when building highly reliable, legal, and cost-efficient scraping solutions.