Skill UI

This skill guides the mastery of smart contract security best practices for Solidity. It is essential for writing robust, secure, and efficient contracts, auditing existing code for common vulnerabilities (such as reentrancy, overflow, and access control issues), and implementing secure DeFi protocols. It focuses on preventing common attack vectors while optimizing gas usage.

Guides Spring Boot 3.x engineers through configuration scaffolds, REST controllers, Spring Security 6 authentication flows, Spring Data JPA repositories, and reactive WebFlux endpoints, making it easier to build microservices and Java REST APIs.

Checklist covering Spring Security best practices for authentication, authorization, validation, CSRF, secrets, headers, rate limiting, dependency scans, and logging in Java Spring Boot services.

Structured pre-PR verification loop for Spring Boot projects that runs fast-build checks, static analysis, tests with coverage, security scans, formatting gates, and diff reviews to catch issues before deployment.

Scans Substrate/Polkadot FRAME pallets for seven critical vulnerabilities such as arithmetic overflow, panic DoS, incorrect weights, unsigned validation issues, bad randomness, and origin flaws, making it ideal for runtime audits and pre-launch security assessments.

This tool collects a comprehensive, redacted diagnostic bundle from a Supabase project. It systematically tests connectivity, authentication (Auth), Realtime capabilities, Storage buckets, and Row-Level Security (RLS) policies. The resulting archive is designed for sharing with support teams to accelerate troubleshooting of complex issues like connection failures or misconfigurations.

A comprehensive guide detailing the most common and critical mistakes when developing with Supabase. Covers severe security issues (like exposing service role keys or missing RLS), data integrity failures, and performance bottlenecks (connection pooling, N+1 queries). Essential for code review, onboarding new developers, or auditing existing Supabase projects to ensure secure and robust applications.

A specialized skill for conducting comprehensive security architecture reviews, risk assessments, and threat identification. It masters advanced methodologies like STRIDE, PASTA, and attack tree construction. Use this to build secure-by-design systems, identify potential attack vectors, and strengthen system resilience before deployment.

Provides Twilio-based communication patterns covering SMS, voice, WhatsApp, and Verify flows; includes error handling, compliance reminders, rate limits, segmentation warnings, and OTP 2FA guidance for notifications, confirmations, and security workflows.

This skill scans web application endpoints and cookies to spot missing CSRF safeguards—tokens, double-submit cookies, SameSite attributes, and origin checks—then documents vulnerable paths and mitigation steps for security reviews.

This skill provides robust guidelines and patterns for managing environment variables and sensitive credentials securely. It is designed to ensure that secrets, API keys, and other confidential information are never accidentally exposed or logged in Claude sessions, terminal outputs, development logs, or version control commits (like Git). Use this skill when handling sensitive data in development workflows to maintain maximum security.

This comprehensive guide outlines security best practices for utilizing Vast.ai's cloud environment. It covers secure API key management, hardening SSH access to GPU instances, implementing proper data cleanup before instance destruction, and adhering to robust network security protocols. Use this when setting up, auditing, or deploying sensitive AI/ML workloads on shared cloud hardware.