Skill UI

This guide provides comprehensive patterns for designing and implementing secure multi-tenant SaaS applications using shared databases. It covers critical techniques like Row-Level Security (RLS) in PostgreSQL, implementing tenant-aware middleware in TypeScript (Express/Fastify), and enforcing data scoping at the ORM level (Prisma/Drizzle). Learn how to prevent data leakage and manage tenant isolation across shared schemas.

A comprehensive guide to building HIPAA, GDPR, and other global compliance systems for healthcare applications. This pattern outlines best practices for protecting Protected Health Information (PHI) and Personally Identifiable Information (PII) by implementing robust access controls, Row-Level Security (RLS), and mandatory audit trails. Essential for any feature handling patient or clinical data.

This skill monitors for regressions on deployed URLs following deployments, merges, or dependency upgrades. It performs comprehensive checks including HTTP status, console errors, network failures, performance metrics (LCP/CLS/INP), and crucial API endpoint health, ensuring service stability in production or staging environments. Supports quick checks, continuous monitoring, and differential comparison against baselines.

This powerful tool utilizes Playwright to record high-quality, professional web application demo videos. It simulates natural user interactions, injecting a visible cursor overlay and adhering to specific pacing guidelines. It is ideal for creating comprehensive tutorials, feature walk-throughs, or documentation for stakeholders.

Guides AI agents through analyzing working code, spotting overly complex structures, then refactoring for clarity while preserving exact behavior and project conventions, especially after reviews or high-pressure edits.

This guide provides a systematic, step-by-step process for root-cause debugging and error recovery. It outlines a structured triage checklist to follow when tests fail, builds break, or unexpected runtime errors occur. By following these steps, users can ensure they fix the underlying root cause rather than merely treating symptoms.

This comprehensive guide details how to properly integrate and configure Firebase within Flutter applications. It covers initial setup using `flutterfire configure`, essential initialization in `main.dart`, handling platform-specific requirements, and advanced techniques for managing multiple app flavors (dev, staging, prod).

Accelerates GitHub cloning, release/raw/archive downloads, and other resource access for Mainland China users by rewriting URLs through githubproxy.cc or fallback ghfast.top, with an optional URL converter script for quick adaptation.

This skill provides comprehensive functionality for reading, creating, editing, and downloading content from Lark Feishu Docs (Docx/Wiki). Whether accessing via URL or token, it supports structured content manipulation using both XML and Markdown formats (v2 API). Use it for fetching document details, updating specific blocks, and managing embedded media and resources like whiteboards and images. Note that it requires prerequisite knowledge for advanced operations.

This comprehensive guide details security-first development practices, emphasizing threat modeling (STRIDE) and secure design principles. It provides mandatory controls for validating all external input, preventing common vulnerabilities like XSS and SQL injection, and properly managing authentication and sensitive data storage. Use it when building any feature that handles untrusted data or interacts with external systems.

Deploy applications or static sites to Vercel instantly via a script that packages your project, auto-detects frameworks, uploads artifacts, and returns preview and claim URLs without requiring authentication.

Covers comprehensive HTML injection attack scenarios, detection tips, and tooling so security testers can validate and document injection points, phishing overlays, and reflected or stored payloads during vulnerability assessments.