Skill UI

Provides comprehensive security review guidance for authentication, input handling, secrets, APIs, and payment-sensitive workflows, with actionable checklists covering secrets, validation, SQL injection, auth, XSS, CSRF, rate limits, and sensitive data handling.

This expert skill specializes in comprehensive dependency security analysis, generating Software Bill of Materials (SBOM), and securing the entire software supply chain. It scans project dependencies across multiple ecosystems to identify critical vulnerabilities, assess compliance risks, and provide automated, actionable remediation strategies for modern development environments.

This skill provides expertise in building production-grade, scalable data systems and pipelines. It covers the full spectrum of data engineering, including designing robust batch ETL/ELT workflows, implementing real-time streaming architectures (Kafka/Flink), and utilizing modern tools like Airflow, Spark, and dbt. Essential for data architecture design, data lakehouse implementation, and data governance.

A comprehensive fullstack development toolkit designed to accelerate project setup and maintain code health. It provides project scaffolding for popular stacks (Next.js, FastAPI, MERN, Django), generating complete boilerplate code, Docker configurations, and environment templates. Furthermore, the Code Quality Analyzer audits existing codebases for critical security vulnerabilities, complexity metrics, and dependency issues, ensuring high standards throughout the development lifecycle. Ideal for new project initiation and routine code auditing.

Provides a Senior SecOps engineer toolkit for running SAST/DAST, dependency CVE scans, policy checks, and compliance automation (SOC2/PCI-DSS/HIPAA/GDPR) during audits, CVE response, or CI/CD hardening.

SentencePiece provides a language-independent tokenizer that trains BPE or Unigram vocabularies directly from raw Unicode text, ideal for multilingual, CJK, or reproducible NLP pipelines while staying lightweight and fast.

Provides step-by-step diagnostics for Sentry SDK problems, covering debug mode checks, source map repair, event sampling, transaction tracing, and CLI tools to confirm instrumentation and performance coverage.

Guide SREs and security admins through configuring enterprise-grade role-based access control in Sentry, covering team setup, permissions, SSO/SAML integration, SCIM provisioning, and token hygiene to manage organizational access safely.

Establishes Sentry governance by provisioning shared configs, enforcing PII scrubbing, environment guards, naming rules, alert templates, and compliance audits for consistent organizational usage.

Provides step-by-step guidance on technical SEO, on-page metadata, structured data, URLs, sitemaps, and security headers to improve visibility as per Lighthouse and Google SEO guidelines.

Guides engineers through setting up Server Sent Events connections as part of API integration work, providing best practices, sample configurations, and validated code for third-party webhooks, SDKs, and OAuth flows.

Provides architecture guidance for Istio/Linkerd-based service meshes, covering traffic management, security policies, observability, and multi-cluster networking to stabilize cloud-native microservices.