Skill UI

An expert AI specialist that integrates advanced static analysis (e.g., CodeQL, SonarQube) with modern DevOps practices. It performs multi-layered code reviews, checking for security vulnerabilities, performance bottlenecks, architectural flaws, and adherence to best practices across various languages. Ideal for CI/CD pipelines and pull request validation.

This skill guides the comprehensive, multi-step rollout of CodeRabbit AI code review across an entire organization. It covers setting organization-level defaults, customizing team-specific review rules (e.g., API security, frontend performance), and automating deployment via multi-repo scripts and branch protection enforcement. Use when establishing standardized, high-quality AI code review practices company-wide.

This comprehensive guide details how to implement robust webhook endpoints for CodeRabbit, an AI-powered code review tool. It covers essential security practices, including signature validation (HMAC-SHA256), and provides structured methods for handling various event types (e.g., PR reviews, check run completions, comments). Use this skill when integrating CodeRabbit into CI/CD pipelines to automate notifications, track metrics, and enforce quality gates.

Orchestrates an exhaustive, multi-dimensional code review process by coordinating specialized agents (e.g., security, performance, quality, architecture). This workflow covers code quality, architectural integrity, security vulnerabilities (OWASP Top 10), performance bottlenecks, and test coverage, providing consolidated, actionable feedback and remediation guidance.

Constant-time testing spots timing side channels in crypto code by verifying execution paths stay independent of secrets, guiding security reviews during audits and pull requests.

Automates CSRF protection validator guidance within Security Fundamentals, offering best-practice patterns, production-ready code, and validation checks for authentication and secure-coding tasks.

This comprehensive guide details essential security best practices for integrating with Customer.io. It covers secure credential storage using secrets managers, sanitizing Personally Identifiable Information (PII) via hashing, verifying webhook signatures (HMAC-SHA256) to ensure data integrity, and establishing procedures for API key rotation to maintain compliance with GDPR/CCPA regulations.

A comprehensive guide detailing security best practices for Deepgram API integration. It covers critical topics such as implementing scoped API keys, key rotation strategies, enabling built-in PII redaction for sensitive data, generating temporary client-side keys, and validating audio URLs to prevent SSRF attacks. Use this when building robust, production-grade applications requiring high data security and compliance.

A comprehensive expert for configuration management, specializing in validating, testing, and ensuring the correctness of application settings. It creates robust validation schemas (e.g., JSON Schema) and performs critical checks, including identifying potential security secrets (API keys, passwords), ensuring data consistency across different environments (development, staging, production), and enforcing type safety for reliable deployments.

Provides Django security best practices covering production settings, authentication, authorization, CSRF and SQL injection protection, plus deployment hardening to keep live apps safe.

This expert provides advanced, practical knowledge across the entire lifecycle of containerized applications. Core expertise includes multi-stage Dockerfile optimization, container security hardening (non-root users, minimal attack surface), and advanced orchestration using patterns like Docker Compose. Ideal for ensuring robust, secure, and production-ready deployments.

A comprehensive guide to building, optimizing, and deploying production-grade Docker images and containers. Covers advanced concepts such as multi-stage builds, layer caching optimization, security hardening (non-root users, secrets), health checks, and effective volume/network configuration using docker-compose.