Skill UI

A comprehensive guide and implementation pattern for enforcing granular Role-Based Access Control (RBAC) on the Exa search API in multi-tenant or enterprise environments. This skill demonstrates how to implement API key scoping, restrict search domains by role, enforce maximum result limits, and track daily usage to ensure robust data governance and security.

This comprehensive guide details essential security practices for integrating the Exa API. It covers key areas such as secure API key management using environment variables, implementing content moderation to filter unsafe results, restricting results via domain allow/block lists, and sanitizing user queries to prevent injection attacks. Use this when hardening or auditing an Exa-powered application.

Guides building async FastAPI services with Pydantic V2 models, JWT auth, SQLAlchemy async, WebSocket, and OpenAPI, ensuring production-grade standards for REST endpoints, schema validation, and docs.

This template provides production-ready FastAPI project skeletons, incorporating advanced features such as async patterns, dependency injection, middleware, and robust error handling. It is essential for developers starting new high-performance REST APIs, microservices, or complex backend systems in Python, ensuring adherence to best architectural practices.

Automates guidance for API filtering query builder tasks, offering industry best practices, production-ready code, and validation across REST, GraphQL, OpenAPI, and authentication design patterns.

This guide outlines how to implement robust Role-Based Access Control (RBAC) for Firecrawl scraping resources. It allows enterprises to manage multiple API keys, enforce per-team credit consumption limits, and restrict scraping to specific allowed domains (allowlisting). Use this when scaling scraping operations across various departments or services that require granular resource governance and budget tracking.

This skill guides the development of robust, security-focused full-stack web applications. It ensures layered security coverage across the entire application stack, from database queries (parameterized queries) to API endpoints (authentication/authorization) and frontend components (input validation, output encoding). Use this when building end-to-end features, microservices, or REST APIs that require simultaneous attention to Frontend, Backend, and Security best practices.

Automated fuzz testing of APIs via the /fuzz-api command to inject malformed, boundary, and random payloads, spotting crashes, SQL injection, XSS, and validation gaps during vulnerability scanning or security reviews.

This guide sets up a robust local development workflow for integrating with the Gamma REST API. It includes a reusable client wrapper, a polling helper for handling asynchronous tasks, and a local mock server. Use this setup when building automation scripts, testing API calls offline, or simulating API responses without needing external service credentials or network connectivity.

This skill provides a comprehensive set of reusable, production-grade TypeScript patterns for interacting with the Gamma REST API, which lacks an official SDK. It includes implementation for typed clients, advanced polling mechanisms, structured error handling, and complex generation workflows (e.g., template-based generation). Use this when building robust, reliable applications that integrate deeply with Gamma's content generation services.

Generate complete, production-ready REST API implementations from existing OpenAPI specifications or database schemas. This skill scaffolds all necessary CRUD endpoints (GET, POST, PUT, DELETE) across multiple frameworks (Express, FastAPI, Spring Boot, etc.), automatically incorporating features like pagination, filtering, validation, and robust authentication middleware. Ideal for rapidly bootstrapping complex backend services from defined data models.

An expert guide to designing secure, performant GraphQL APIs covering schema design, resolvers, federation, DataLoader batching, subscriptions, and client integration with Apollo/urql, including advice on when REST may be preferable.