Skill UI

Provides comprehensive guidelines for modern web development, covering critical areas like security best practices (e.g., CSP, HTTPS enforcement, input sanitization), browser compatibility (viewport, encoding), and avoiding deprecated APIs. Use this skill when aiming to audit, modernize, or improve the overall quality and robustness of web code.

A specialist guide for designing, implementing, and optimizing high-performance C++ applications using modern standards (C++20/23). Expertise covers advanced topics like concepts, coroutines, template metaprogramming, and zero-overhead abstractions. Use this when tackling complex memory management, concurrency bottlenecks, or integrating build systems via CMake, ensuring code meets industrial quality standards through rigorous sanitization and profiling.

An expert skill dedicated to building secure, robust frontend applications. It specializes in preventing client-side vulnerabilities such as XSS and clickjacking. Core capabilities include safe DOM manipulation, implementing Content Security Policy (CSP), advanced input sanitization (allowlisting), and securing complex interactions like secure redirects and session management.

This skill provides comprehensive patterns for handling sensitive data when integrating with Mistral AI. It covers PII redaction (emails, phone numbers, etc.), implementing data retention policies, and enforcing compliance with global privacy regulations like GDPR and CCPA. Key features include safe API wrappers, dataset sanitization for fine-tuning, and conversation history management with TTL and user erasure rights.

Provides comprehensive security best practices for integrating the Perplexity API. This guide covers secure API key management using environment variables, critical query sanitization (stripping PII like emails, phone numbers, and credit cards), and implementing domain filters for compliance. Essential for developers building production applications that handle sensitive user data.

This guide provides comprehensive strategies for implementing privacy-safe analytics using PostHog. It addresses critical compliance requirements like GDPR and CCPA, covering explicit consent management (opt-in/opt-out), real-time property sanitization (stripping PII like IP or tokens), and methods for handling Data Subject Access Requests (SAR) and the Right to Erasure. Use this to build highly compliant and privacy-preserving analytics pipelines.

Provides comprehensive expertise for building robust WordPress sites. Specializing in custom theme and plugin development, implementing modern Gutenberg blocks, extending WooCommerce functionality, and managing the WordPress REST API. Core focus areas include advanced security hardening (nonces, sanitization, capability checks), performance optimization (caching, query tuning), and adhering strictly to WordPress coding standards.

Assess web apps for client-side injection flaws, covering stored, reflected, and DOM XSS plus HTML injection, demonstrate session hijacking payloads, and guide validation and sanitization checks.

Guides Sankhya dashboard developers on HTML/JSP/Java patterns, SQL sanitization, BI parameterization, and UI/UX consistency so dashboards load reliably with lazy-loading states and structured queries.

This comprehensive skill guides the testing of web applications for Cross-Site Scripting (XSS) vulnerabilities. It covers reflected, stored, and DOM-based injection points. Testers learn to map input/output contexts, craft context-appropriate payloads, and bypass complex sanitization and CSP protections, ensuring thorough client-side security assessment.

Creates a new Google Model Armor template via `gws modelarmor +create-template`, requiring project, location, and template ID, with optional preset or JSON payload; aimed at bootstrapping safety filters before sanitization commands.

Provides comprehensive security guidelines for integrating Anthropic Claude API. Covers essential best practices including secure API key management (rotation, isolation), defending against prompt injection attacks by separating system instructions from user input, robust input sanitization, and output validation to prevent accidental data leakage. Essential for building production-grade, secure AI applications.