Skill UI

A comprehensive guide for developers on building secure and robust APIs across REST, GraphQL, and WebSocket protocols. It covers essential security patterns including robust authentication (JWT, OAuth 2.0), granular authorization (RBAC), input validation to prevent injection attacks (SQLi, XSS), rate limiting, and best practices for data encryption and secure headers. Essential for developers preparing for security audits.

Automates database backups by generating compression/encryption scripts, scheduling cron jobs, and documenting restore procedures for PostgreSQL, MySQL, MongoDB, and SQLite whenever backup automation or disaster recovery planning is requested.

Automates database backups by generating compression/encryption scripts, scheduling cron jobs, and documenting restore procedures for PostgreSQL, MySQL, MongoDB, and SQLite whenever backup automation or disaster recovery planning is requested.

This guide provides comprehensive techniques to optimize LangChain applications for production environments. Learn how to measure baseline latency, implement efficient caching strategies (in-memory, Redis, SQLite), utilize batch processing with concurrency control, and maximize perceived speed through streaming. Furthermore, it covers prompt optimization and strategic model selection to ensure high throughput and low costs.

Manages database schema migrations by generating timestamped up/down scripts for PostgreSQL, MySQL, SQLite, or MongoDB, letting you create, apply, or rollback changes safely when handling schema updates.

Mastery of modern mobile development across multiple platforms, including React Native, Flutter, and native iOS/Android. Expertise covers the entire lifecycle, specializing in architectural patterns (Clean, MVVM), performance optimization, offline-first data synchronization (GraphQL, SQLite), advanced DevOps practices (CI/CD, Fastlane), and App Store Optimization (ASO). Ideal for building robust, scalable, and highly performant cross-platform applications.

An expert assistant providing deep knowledge and best practices for Prisma ORM. It covers the entire lifecycle of database interaction, including optimal schema design, relation modeling, safe migration workflows, and advanced query optimization techniques (addressing N+1 issues and implementing raw queries) across PostgreSQL, MySQL, and SQLite.

A powerful skill for conducting structured, systematic code reviews for PRs and MRs. It goes beyond basic style checks, performing deep analysis such as blast radius tracing, comprehensive security scanning (SQLi, XSS, secrets), detecting breaking changes in APIs/DB schemas, and calculating test coverage delta. Ideal for reviewing large, complex, or security-sensitive code changes before merging.

A comprehensive guide for conducting penetration testing on iOS and Android mobile applications, adhering to the OWASP MASTG. This skill covers the full mobile attack surface, including static analysis of binaries, dynamic runtime testing, and deep API security assessment. Techniques taught include bypassing certificate pinning, analyzing local data storage (Keychain, SQLite), and identifying vulnerabilities in authentication and network communication.

This tool analyzes Web Application Firewall (WAF) logs (ModSecurity, AWS WAF, Cloudflare) to detect sophisticated SQL injection attack campaigns. It parses diverse log formats, identifies common SQLi payloads (UNION SELECT, OR 1=1), correlates multi-stage attacks, tracks source IPs, and generates detailed incident reports classified by OWASP standards for SOC analysts and security researchers.

A comprehensive framework for penetration testing APIs, designed to detect and exploit critical injection flaws. It covers SQL injection (SQLi), NoSQL injection, OS command injection, LDAP injection, and Server-Side Request Forgery (SSRF). This skill guides the testing of all input vectors—including path parameters, headers, query strings, and request bodies—to assess input validation and backend security posture against industry standards like OWASP.

This comprehensive guide outlines techniques for authorized penetration testing of real-time web applications using WebSocket connections. It covers discovering various WebSocket endpoints, testing for authentication bypass, identifying Cross-Site WebSocket Hijacking (CSWSH) vulnerabilities, and assessing message handling for injection flaws (SQLi, XSS). Essential for securing chat, trading, and live notification platforms.