Skill UI

Automates threat modeling guidance within Security Advanced: step-by-step best practices, compliance-ready code, and validation for enterprise security workflows.

A specialized skill for conducting comprehensive security architecture reviews, risk assessments, and threat identification. It masters advanced methodologies like STRIDE, PASTA, and attack tree construction. Use this to build secure-by-design systems, identify potential attack vectors, and strengthen system resilience before deployment.

Provides a structured reference of the 100 most critical web application vulnerabilities organized by category, helping security teams identify attack vectors, assess impacts, and follow remediation guidance during audits or penetration tests.

Provides Twilio-based communication patterns covering SMS, voice, WhatsApp, and Verify flows; includes error handling, compliance reminders, rate limits, segmentation warnings, and OTP 2FA guidance for notifications, confirmations, and security workflows.

Validating Authentication Implementations assesses authentication mechanisms like JWT, OAuth, sessions, and API keys against security standards, then reports vulnerabilities and recommendations for password policy, MFA, token handling, and session security.

This skill scans web application endpoints and cookies to spot missing CSRF safeguards—tokens, double-submit cookies, SameSite attributes, and origin checks—then documents vulnerable paths and mitigation steps for security reviews.

Validates PCI DSS compliance by running the pci-dss-validator plugin on codebases or infrastructure configs, then reports violations and remediation steps for developers, security engineers, and compliance officers.

This expert skill validates the deployment readiness of Vertex AI Agent Engines. It executes a weighted audit across five critical dimensions: security, monitoring, performance, compliance, and best practices. The output provides a comprehensive 0-100% composite score, a detailed pass/fail report for each check, and a prioritized, actionable remediation plan, ensuring high-quality, production-grade deployments.

This skill provides robust guidelines and patterns for managing environment variables and sensitive credentials securely. It is designed to ensure that secrets, API keys, and other confidential information are never accidentally exposed or logged in Claude sessions, terminal outputs, development logs, or version control commits (like Git). Use this skill when handling sensitive data in development workflows to maintain maximum security.

This comprehensive guide outlines security best practices for utilizing Vast.ai's cloud environment. It covers secure API key management, hardening SSH access to GPU instances, implementing proper data cleanup before instance destruction, and adhering to robust network security protocols. Use this when setting up, auditing, or deploying sensitive AI/ML workloads on shared cloud hardware.

Configure Vercel's advanced role-based access control (RBAC) for enterprise environments. This guide covers setting up granular team roles, managing project-level access groups, integrating SAML SSO for secure authentication, and enabling detailed audit logging. Use this when implementing strict security protocols and enforcing the principle of least privilege across your team's deployments and resources.

This comprehensive guide catalogs common anti-patterns and mistakes when deploying applications on Vercel. It covers critical architectural areas such as secret management (preventing key exposure), optimizing serverless function performance (cold start, timeouts), adhering to Edge Runtime standards, and resolving configuration errors. Use this skill for code reviews, security audits, and onboarding new developers to ensure best deployment practices.