Skill UI

This guide provides methods to implement robust data handling, secret detection, and compliance patterns within code reviews (e.g., GDPR, CCPA). It teaches users how to configure CodeRabbit to exclude sensitive files (like .env or keys), detect hardcoded secrets, limit the review scope to active source code, and ensure that PII is properly handled during the CI/CD process.

This guide identifies and avoids anti-patterns and common integration mistakes when working with Exa's neural search API. It covers crucial topics such as distinguishing between keyword and neural searches, properly retrieving content, handling date filters, and managing client instances. Use this when reviewing Exa-powered code, onboarding new team members, or auditing existing integrations for robustness and correctness.

This skill provides a structured methodology for reviewing code commits intended to fix security vulnerabilities or address audit findings. It ensures that the original root cause is properly resolved, verifies the fix hasn't introduced new bugs or vulnerabilities (regressions), and validates the overall completeness of the remediation effort. Ideal for security-critical code reviews.

This comprehensive guide details how to properly set up PostHog for multiple environments (development, staging, production). It emphasizes data isolation by utilizing separate projects, allowing granular control over critical analytics features such as session recording rates, autocapture, and feature flag rollout percentages. This ensures accurate and reliable data tracking across all deployment stages, preventing test data from polluting production analytics.

A comprehensive guide detailing security best practices for building and deploying applications on the Replit platform. Learn how to properly manage sensitive data using Replit Secrets (AES-256 encryption), implement secure service-to-service authentication via REPL_IDENTITY tokens, validate custom headers, and prevent common vulnerabilities like hardcoded API keys and SQL injection. Essential for auditing and securing production environments.

A comprehensive checklist for ensuring Sentry is properly configured before any production deployment. This guide covers best practices for managing environment variables (DSN), implementing release tracking, optimizing error and trace sample rates, uploading source maps, and filtering noise. Essential for go-live readiness and auditing existing monitoring setups.

A specialized tool for auditing source code (C/C++/Rust) to ensure sensitive data (keys, passwords, PII) is properly zeroized. It analyzes memory handling at the assembly and IR level to detect if compiler optimizations, such as dead-store elimination, have accidentally removed or weakened the secure cleanup process. Essential for maintaining security in critical codebases.

This comprehensive guide covers essential security patterns for Perl development, addressing common vulnerabilities like SQL Injection, XSS, Path Traversal, and Shell Injection. It details best practices including using Perl's Taint Mode, implementing strict allow-list validation, performing safe file operations, and executing external commands securely to ensure robust and resilient applications.

This skill is intended for Perl testing functionalities. Currently, the Japanese translation and content are under development, serving as a placeholder. Users should refer to the original English skill file for the core functionality and detailed implementation.

This comprehensive guide details the methodology for identifying and exploiting Insecure Direct Object Reference (IDOR) vulnerabilities. It teaches users how to systematically test broken access control in modern web applications and APIs. By manipulating predictable object identifiers (such as user IDs, order numbers, or document slugs), testers can validate if object-level authorization is properly enforced, preventing unauthorized horizontal or vertical data access.

Comprehensive guide for implementing Firebase Cloud Messaging (FCM) in Flutter applications. Learn how to set up push notifications across iOS, Android, and Web, manage permissions, handle incoming messages in foreground, background, and terminated states, and properly manage FCM token lifecycles.

A comprehensive guide to structuring scalable and testable Flutter applications using established patterns like MVVM, layered architecture, and unidirectional data flow. Learn how to properly separate UI, Logic (Domain), and Data layers, manage state via ViewModels, and implement the Repository pattern for single source of truth.