Skill UI

The API Design Reviewer provides comprehensive automated analysis of REST API designs using OpenAPI specifications. It performs linting for convention adherence, detects breaking changes between versions, and generates a design scorecard across consistency, security, and usability. Ideal for reviewing PRs, auditing API migrations, or establishing robust development standards.

A comprehensive guide to modern API design principles and architectural decision-making. Learn how to select the right pattern (REST, GraphQL, tRPC), implement robust versioning strategies, handle pagination, define standardized response formats, and incorporate essential security measures like authentication and rate limiting. Essential for building scalable and reliable backend services.

A comprehensive guide for developers on building secure and robust APIs across REST, GraphQL, and WebSocket protocols. It covers essential security patterns including robust authentication (JWT, OAuth 2.0), granular authorization (RBAC), input validation to prevent injection attacks (SQLi, XSS), rate limiting, and best practices for data encryption and secure headers. Essential for developers preparing for security audits.

A specialized workflow guide for comprehensive security testing of REST and GraphQL APIs. It systematically covers critical security aspects such as authentication validation (OAuth2, JWT), authorization checks (IDOR, privilege escalation), input validation (SQL/NoSQL injection), rate limiting enforcement, and secure error handling. Ideal for vulnerability assessment, bug bounty programs, and pre-deployment security audits.

This robust SDK is the official client library for .NET applications to interact with Azure Key Vault and Managed HSM. It provides comprehensive functionality for managing the full lifecycle of cryptographic keys, including creation (RSA, EC, Symmetric), version control, property updates, secure deletion, and backup/restore. It supports core cryptographic operations such as encryption, decryption, digital signing, verification, and key wrapping.

Expert guide for designing robust, scalable, and resilient backend systems. Covers modern patterns including Microservices, Event Sourcing, CQRS, and advanced API contracts (REST, GraphQL, gRPC). Specializes in defining service boundaries, implementing distributed transactions (Saga), and integrating comprehensive security measures like OAuth 2.0 and mTLS.

Guides teams through encryption-at-rest checker tasks, offering step-by-step advice, best practices, compliance insights, and production-ready configurations whenever you need help with advanced security, penetration testing, or enterprise compliance workflows.

This guide provides comprehensive best practices for securing Evernote API integrations. It covers essential topics like secure credential management using environment variables or vaults, implementing CSRF-protected OAuth flows, encrypting access tokens at rest using AES-256-GCM, rigorous input validation, and ensuring secure logging practices by redacting sensitive data. Use this when hardening your application against data breaches.

A comprehensive guide and implementation pattern for enforcing granular Role-Based Access Control (RBAC) on the Exa search API in multi-tenant or enterprise environments. This skill demonstrates how to implement API key scoping, restrict search domains by role, enforce maximum result limits, and track daily usage to ensure robust data governance and security.

This comprehensive guide details essential security practices for integrating the Exa API. It covers key areas such as secure API key management using environment variables, implementing content moderation to filter unsafe results, restricting results via domain allow/block lists, and sanitizing user queries to prevent injection attacks. Use this when hardening or auditing an Exa-powered application.

This comprehensive skill covers the full scope of Firebase services, including Authentication, Firestore, Cloud Functions, and Hosting. It goes beyond basic implementation, focusing on critical architectural principles: adopting a query-first, denormalized NoSQL mindset. Key insights include mandatory security rule design, optimal data modeling for performance, and correctly utilizing modular SDKs to build scalable and secure backends.

Manages Firebase/Firestore CRUD, queries, batch jobs, and security for applications while extending to A2A agent messaging, MCP server integration, and Cloud Run coordination for advanced workflows.