Skill UI

Analyzes a website’s HTTP security headers to identify missing or misconfigured directives, then produces a graded report with scores and recommendations for strengthening protections against common web threats.

A comprehensive guide for developers on building secure and robust APIs across REST, GraphQL, and WebSocket protocols. It covers essential security patterns including robust authentication (JWT, OAuth 2.0), granular authorization (RBAC), input validation to prevent injection attacks (SQLi, XSS), rate limiting, and best practices for data encryption and secure headers. Essential for developers preparing for security audits.

Implements enterprise-grade Role-Based Access Control (RBAC) for Apollo.io API integrations. This skill is essential for managing team permissions, ensuring data segregation, and implementing robust security controls by proxying API calls. It defines granular roles (Viewer, Analyst, Admin) and maps specific API operations to required permissions, preventing all-or-nothing key usage.

A comprehensive guide covering security best practices for integrating with the Apollo.io API. This includes secure key storage (using secret managers/env vars), implementing PII redaction for logging, adhering to the principle of least privilege (using standard vs. master keys), and performing key rotation procedures. Essential for building secure and compliant integrations.

Provides expert AWS architecture, security, and implementation guidance backed by MCP tooling, helping teams choose services, migrate workloads, and troubleshoot production issues.

A comprehensive SDK guide for managing Azure MySQL Flexible Server deployments using C# and the .NET framework. This skill provides workflows for automated resource management, including server creation, database provisioning, configuring firewall rules, tuning server parameters, and integrating Entra ID (Azure AD) for robust security and operational control.

This robust SDK is the official client library for .NET applications to interact with Azure Key Vault and Managed HSM. It provides comprehensive functionality for managing the full lifecycle of cryptographic keys, including creation (RSA, EC, Symmetric), version control, property updates, secure deletion, and backup/restore. It supports core cryptographic operations such as encryption, decryption, digital signing, verification, and key wrapping.

Utilize the Azure Key Vault Keys Java SDK to perform comprehensive key lifecycle management and cryptographic operations. This guide covers creating, retrieving, updating, and deleting various key types (RSA, EC, Symmetric) in both standard Azure Key Vault and Managed HSM. It demonstrates key operations such as encryption, decryption, signing, and verifying data using Java.

A comprehensive guide for building production-grade Web3 applications, smart contracts, and decentralized systems. Covers expertise in DeFi protocols, NFT platforms, DAOs, cross-chain interoperability, and advanced smart contract security patterns (Solidity, Rust). Ideal for developers building complex, resilient decentralized finance (DeFi) and enterprise-grade blockchain solutions.

This skill scans session management code to spot insecure IDs, missing expirations, and fixation risks, then summarizes findings and remediation steps for developers needing a session-security audit.

A comprehensive guide for engineering teams to manage critical incidents related to Clerk authentication and SaaS platform outages. It covers full incident lifecycle procedures, including initial triage, emergency auth bypass implementation, key rotation, session recovery scripts, and post-incident root cause analysis. Use this when facing production authentication failures or security breaches.

This comprehensive guide outlines essential, production-grade security best practices for implementing Clerk authentication. It covers securing environment variables, hardening middleware with crucial security headers (like CSP, X-Frame-Options), protecting API routes with granular authorization checks, and verifying webhooks using signature validation (svix). Use this when deploying or auditing an application to ensure maximum security posture.