Skill UI

Automatically scans code for reflected, stored, and DOM-based XSS risks across HTML, JavaScript, CSS, and URLs, providing reports and safe proof-of-concept payloads for use in reviews, audits, or pre-deployment checks.

This skill generates a comprehensive, minimal, and enforceable security policy document (Blue Book) for applications handling sensitive data. It structures requirements using MUST/SHOULD/CAN language, explicitly defining assumptions, scope, threat models, and security gates. It is essential for establishing clear security guardrails and ensuring compliance early in the development lifecycle.

Runs AgentShield to audit Claude Code configuration files and MCP components for secrets, injection risks, and overly permissive settings, offering CLI, JSON/Markdown/HTML reports, auto-fix, Opus deep analysis, and CI-ready GitHub Action hooks to harden new or existing projects.

Guides you through building custom Semgrep rules with a testing-first workflow, AST analysis, and taint-mode preference to catch vulnerabilities or bug patterns while steering clear of overly broad or unverified shortcuts.

A comprehensive guide to configuring Sentry error tracking and performance monitoring across modern application architectures. Learn how to implement coherent, end-to-end distributed tracing for monoliths, microservices, serverless functions (Lambda/Cloud Functions), event-driven systems, SPAs, and mobile applications, ensuring all application hops are monitored from a single source.

This guide provides comprehensive steps to diagnose and fix the most frequent Sentry SDK integration issues. It covers critical topics such as DSN validation, missing event capture, source map failures, rate limiting, and proper flushing patterns in Node.js, Python, and serverless environments. Use this when your error monitoring system is not working as expected.

This skill provides a comprehensive walkthrough for setting up and testing Sentry error monitoring using both Node.js and Python SDKs. It demonstrates how to capture various event types, including simple messages and full exceptions, and crucially, how to enrich these events with user context, searchable tags, and detailed breadcrumbs. This is essential for verifying robust error logging and monitoring in a production environment.

A comprehensive checklist for ensuring Sentry is properly configured before any production deployment. This guide covers best practices for managing environment variables (DSN), implementing release tracking, optimizing error and trace sample rates, uploading source maps, and filtering noise. Essential for go-live readiness and auditing existing monitoring setups.

This guide details advanced patterns for building fault-tolerant Sentry integrations. It addresses critical real-world failure points, such as SDK initialization failures, network outages, and abrupt process shutdowns. By implementing graceful degradation, circuit breakers, and durable offline queuing, applications can ensure core functionality remains online and stable, even when the external error tracking service is unreachable or degraded.

Provides step-by-step guidance on technical SEO, on-page metadata, structured data, URLs, sitemaps, and security headers to improve visibility as per Lighthouse and Google SEO guidelines.

A comprehensive developer reference covering the full spectrum of Shopify development, including Liquid templating, OS 2.0 architecture, GraphQL APIs (Admin and Storefront), and modern headless solutions using Hydrogen. This guide assists in building advanced themes, custom apps, implementing serverless business logic via Functions, and optimizing performance for modern e-commerce storefronts.

This guide helps developers diagnose and fix common issues encountered when integrating the Speak API. It covers critical errors such as authentication failures, incorrect audio formats, rate limiting (429), and session expiration. The resource includes comprehensive HTTP error code reference tables, diagnostic commands (cURL, ffprobe), and resilient code patterns for implementing robust, production-ready error recovery mechanisms.