Skill UI

Quick reference of PostgreSQL best practices covering indexing cheatsheets, data type choices, security policies, and configuration templates to guide optimization and troubleshooting workflows.

This guide details implementing robust Role-Based Access Control (RBAC) within a PostHog Enterprise environment. It covers managing the three-level hierarchy (Organization > Project > Resource), assigning granular member roles (Owner, Admin, Member), configuring scoped API keys for secure integrations, and enforcing enterprise-grade authentication via SSO/SAML. Includes steps for setting up project permissions and auditing system changes.

This skill guides the complete setup and configuration of PostHog SDKs for modern applications. It covers best practices for implementing client-side (browser) and server-side (Node.js/Python) event tracking. Users will learn how to install the necessary SDKs via npm or pip, manage environment variables for both Project API Keys and secure Personal API Keys, and initialize the tracking service correctly to ensure accurate and reliable event capture in PostHog.

This guide outlines best practices for securing PostHog API keys. It differentiates between low-risk Project keys and high-privilege Personal keys, detailing methods for implementing least-privilege access, scoped key creation, secure rotation procedures, and leak prevention using environment variables, pre-commit hooks, and server-side isolation.

This skill performs deep, line-by-line scanning of an entire codebase to understand its architecture, patterns, and dependencies. It systematically identifies critical issues across security vulnerabilities (SQL injection, secrets), performance bottlenecks (N+1 queries, caching), architectural flaws, and code quality gaps. It then automatically refactors and fixes all identified issues, transforming the code into professional, production-grade, enterprise-level quality.

Assists with automated guidance on rate limiter configuration as part of Security Fundamentals, offering best practices, production-ready snippets, and validation against standard security patterns whenever rate limiting questions arise.

Provides red team workflows combining subdomain enumeration, live host discovery, technology fingerprinting, XSS hunting, API fuzzing, and automated recon scripting to support bug bounty hunters and security researchers.

This comprehensive workflow guides developers through building a production-ready, full-stack web application entirely within the Replit environment. It covers setting up the entire architecture, including Express/Flask backend logic, robust PostgreSQL database integration for persistent data, implementing secure user authentication using Replit Auth, and managing file uploads via Object Storage. It is the definitive guide for launching a complex, scalable SaaS project from scratch.

Comprehensive guide to managing data securely in Replit applications. This skill covers three core storage systems: PostgreSQL for structured data and complex queries; Replit KV Database for caching and session management; and Object Storage for file uploads and blobs. Learn best practices including parameterized queries, TTL implementation, and secure data access patterns.

This comprehensive skill manages the full lifecycle deployment of applications on the Replit platform. It supports three key deployment types: Static (for frontends), Autoscale (for variable APIs), and Reserved VM (for always-on services). Use this for configuring production environments, setting up custom domains, implementing health checks, managing environment secrets, and optimizing scaling strategies.

A comprehensive guide for configuring and managing organizational access control in Replit Enterprise. This skill covers defining role hierarchies (Owner, Admin, Manager, Editor, Viewer), implementing custom groups, integrating Single Sign-On (SSO/SAML), restricting deployment permissions (Production/Staging), and setting up detailed audit logging. Use this when securing a large development team, setting up strict security policies, or performing quarterly access reviews.

This guide provides a comprehensive setup for Replit applications. It covers configuring essential files like .replit and replit.nix for dependency management, securely managing environment secrets (AES-256), and integrating robust user authentication via Replit Auth (supporting Google, GitHub, etc.). Ideal for starting a new, production-ready Replit project.