Skill UI

This comprehensive guide demonstrates how to implement robust Role-Based Access Control (RBAC) for applications deeply integrated with Linear. It covers utilizing Linear's built-in roles, mapping application roles to specific OAuth scopes, implementing powerful permission guard middleware, and integrating advanced enterprise features like SAML SSO and SCIM provisioning, ensuring secure and scalable access management for large organizations.

A comprehensive guide detailing security best practices for integrating with Lokalise. Covers strategies for managing API token scopes (read-only vs. read-write), enforcing the principle of least privilege, validating translated content for XSS or credential leakage, verifying webhook secrets, and securing CI/CD pipelines against hardcoded secrets. Essential for developers and DevOps engineers.

This guide demonstrates how to implement robust Role-Based Access Control (RBAC) for MaintainX integrations using TypeScript and Express. It defines multiple user roles (Admin, Manager, Technician, Viewer) with specific, granular permissions across various resources (work orders, assets, locations). The implementation utilizes permission middleware and scoped API keys to ensure that users can only perform actions designated by their assigned role, enforcing security and data integrity at the API level.

This guide details implementing robust Role-Based Access Control (RBAC) within a PostHog Enterprise environment. It covers managing the three-level hierarchy (Organization > Project > Resource), assigning granular member roles (Owner, Admin, Member), configuring scoped API keys for secure integrations, and enforcing enterprise-grade authentication via SSO/SAML. Includes steps for setting up project permissions and auditing system changes.

This guide outlines best practices for securing PostHog API keys. It differentiates between low-risk Project keys and high-privilege Personal keys, detailing methods for implementing least-privilege access, scoped key creation, secure rotation procedures, and leak prevention using environment variables, pre-commit hooks, and server-side isolation.

A comprehensive, multi-phase workflow designed for conducting deep security audits across modern web applications and APIs. This bundle guides users through the entire security lifecycle, including reconnaissance, vulnerability scanning (SAST/DAST), specific testing for OWASP Top 10 and injection flaws, specialized API fuzzing, full-scope penetration testing, security hardening, and final risk reporting. Ideal for compliance checks and proactive security enhancement.

This skill generates a comprehensive, minimal, and enforceable security policy document (Blue Book) for applications handling sensitive data. It structures requirements using MUST/SHOULD/CAN language, explicitly defining assumptions, scope, threat models, and security gates. It is essential for establishing clear security guardrails and ensuring compliance early in the development lifecycle.

This central skill specializes in performing comprehensive threat modeling using STRIDE and calculating risk via DREAD scoring. It guides users through defining scope, identifying threats, and planning mitigations for new architectures. Crucially, it acts as a security router, directing specialized requests—such as pen-testing, incident response, cloud posture checks, and AI security reviews—to the appropriate dedicated skill.

A comprehensive guide to production-ready error tracking using Sentry SDK in TypeScript and Python. Learn how to implement structured error context via scopes, manage user journeys with breadcrumbs, filter out noise and PII using beforeSend/beforeBreadcrumb hooks, and use custom fingerprinting for accurate issue grouping. Essential for robust observability.

This skill provides detailed guidance on authoring effective `specs.md` files for autonomous development workflows. It teaches users how to clearly define sprint goals, establish explicit scope boundaries (In/Out of Scope), and configure rigorous testing requirements (QA, UI Testing). This ensures that agentic development remains focused and prevents scope creep.

Implements a robust, enterprise-grade Role-Based Access Control (RBAC) system for Supabase. This skill teaches how to store custom roles (e.g., admin, editor, viewer) in JWT claims (`app_metadata`), enforce granular permissions, and scope access at the row level using PostgreSQL RLS policies. It covers organization scoping, role hierarchy management, and API key protection.

A comprehensive guide to configuring Vercel across Development, Preview, and Production environments. Learn how to scope environment variables, manage secrets, and automate multi-stage deployments using both the Vercel CLI and REST API. Covers setting up custom environments (e.g., Staging) and implementing environment detection in code for reliable application behavior.