Skill UI

This SDK provides comprehensive Java support for managing secrets within Azure Key Vault. It enables developers to securely store, retrieve, update, list, delete, and recover sensitive configuration data, such as API keys, database passwords, and connection strings. It is essential for building secure, production-ready applications that comply with best security practices.

Search, filter, and extract data from Burp Suite .burp files via the burpsuite-project-file-parser CLI wrapper, letting you fetch targeted headers, audit findings, or traffic snippets without loading the GUI when hunting for security issues.

Scans Cairo/StarkNet smart contracts for six critical issues spanning felt252 arithmetic, messaging, access control, and signature replay, reporting severity and fixes to support audits, bridge reviews, and pre-launch security checks.

This skill provides a comprehensive checklist for performing rigorous code security reviews. It covers critical areas such as secrets management, input validation, preventing SQL injection, secure authentication (JWT, RLS), and mitigating XSS/CSRF vulnerabilities. Essential for developers building features that handle sensitive data or user input.

Automates guidance for certificate lifecycle manager operations within the Security Advanced domain and kicks in when you ask about certificate lifecycle patterns, best practices, deployment, or compliance setups.

An expert developer specializing in secure backend coding practices, vulnerability mitigation, and robust API design. Proficient in preventing common attacks such as SQL injection, XSS, and CSRF. Covers comprehensive areas including input validation, authentication mechanisms (OAuth 2.0, MFA), database security, and implementing necessary security headers (CSP, HSTS) for building secure-by-design applications. Ideal for implementing security fixes or building new, hardened backend services.

Provides comprehensive guidelines for modern web development, covering critical areas like security best practices (e.g., CSP, HTTPS enforcement, input sanitization), browser compatibility (viewport, encoding), and avoiding deprecated APIs. Use this skill when aiming to audit, modernize, or improve the overall quality and robustness of web code.

A comprehensive guide for building production-grade Web3 applications, smart contracts, and decentralized systems. Covers expertise in DeFi protocols, NFT platforms, DAOs, cross-chain interoperability, and advanced smart contract security patterns (Solidity, Rust). Ideal for developers building complex, resilient decentralized finance (DeFi) and enterprise-grade blockchain solutions.

Generates production-ready CI/CD configurations for GitHub Actions, GitLab CI, and Jenkins, covering testing, security, build, and deployment stages to automate software delivery pipelines and multi-environment releases.

This skill enables Claude to generate production-ready CI/CD pipeline configurations for major platforms, including GitHub Actions, GitLab CI, and Jenkins. It automates the entire software development lifecycle, supporting best practices for testing, building, security scanning, and multi-environment deployment. Use this when setting up automated software delivery workflows.

Generates reusable Terraform modules based on user specifications by invoking the terraform-module-builder plugin to produce production-ready configurations that include documentation, security safeguards, and scalable patterns whenever an infrastructure-as-code structure is requested.

Automates HIPAA compliance checks across codebases, infrastructure configurations, and documentation by leveraging the hipaa-compliance-checker plugin to flag privacy, security, and access-control risks for projects handling PHI.