Skill UI

An expert tool for generating high-level system context documentation using the C4 Model. This skill helps define system boundaries by documenting key personas, user journeys, core features, and external dependencies. It provides a stakeholder-friendly overview, ideal for initial architectural planning and system scoping.

A comprehensive guide to optimizing costs associated with AI code review tools like CodeRabbit. Learn strategies for right-sizing seat allocation, scoping services to high-value repositories, and implementing granular file filters to minimize unnecessary AI processing and billing overhead. Essential for managing SaaS spend in a DevOps environment.

A comprehensive guide and implementation pattern for enforcing granular Role-Based Access Control (RBAC) on the Exa search API in multi-tenant or enterprise environments. This skill demonstrates how to implement API key scoping, restrict search domains by role, enforce maximum result limits, and track daily usage to ensure robust data governance and security.

This guide details how to implement robust, multi-layered Role-Based Access Control (RBAC) for managing LLM API calls to Groq in an enterprise setting. It covers best practices for API key scoping, application-level authorization (model selection, token limits), rate limiting, and detailed spending control mechanisms, ensuring secure and cost-effective usage across multiple teams.

This guide outlines critical security measures for integrating with Guidewire systems, which handle sensitive policyholder PII, claims, and financial data. It covers best practices for implementing OAuth2 JWT authentication, API role scoping, input validation, and sensitive data redaction (PII) to prevent data breaches and meet compliance standards.

This guide details Apple's Human Interface Guidelines (HIG) for implementing crucial navigation components. It provides best practices for search fields (instant feedback, scoping), page controls (linear sequences), and path controls (file hierarchy/breadcrumbs). It helps developers ensure their application's UI feels native and intuitive across various Apple platforms (iOS, macOS, etc.).

Provides a comprehensive checklist for planning, scoping, executing, and wrapping up penetration tests, covering objectives, authorization, environment prep, scans, tester selection, methodologies, reporting, and remediation tracking.

Implements a robust, enterprise-grade Role-Based Access Control (RBAC) system for Supabase. This skill teaches how to store custom roles (e.g., admin, editor, viewer) in JWT claims (`app_metadata`), enforce granular permissions, and scope access at the row level using PostgreSQL RLS policies. It covers organization scoping, role hierarchy management, and API key protection.

A comprehensive, multi-stage framework for responding to confirmed or suspected malware infections across an enterprise. This guide covers the entire incident lifecycle: detection, scoping, containment, deep analysis (mapping to MITRE ATT&CK), thorough eradication, and system recovery, ensuring all steps are documented for resilience and compliance.

This comprehensive guide details robust techniques for managing the entire API key lifecycle. It mandates secure key generation with high entropy, server-side hashing (SHA-256/bcrypt) to prevent plaintext storage, and implements granular controls like per-key scoping (endpoints, IPs, rate limits). Key features include zero-downtime key rotation workflows and automated monitoring for key leakage across code repositories and logs. Ideal for server-to-server API authentication.

Guides teams through designing, implementing, and evidencing SOC 2 Type II controls aligned with the AICPA Trust Services Criteria, covering scoping, control mapping, evidence collection, remediation, and audit collaboration for a six- to twelve-month examination.

A systematic protocol for repairing broken features by scoping the module, tracing every dependency, diagnosing issues, fixing them, and verifying results—ideal when a feature needs end-to-end debugging rather than a quick patch.