Skill UI

A comprehensive checklist for ensuring an application integrated with Clerk is fully production-ready. It covers essential steps across environment configuration, security hardening (e.g., CORS, rate limiting), monitoring setup, graceful error handling, and performance optimization necessary before launching to a live audience.

This comprehensive guide outlines essential, production-grade security best practices for implementing Clerk authentication. It covers securing environment variables, hardening middleware with crucial security headers (like CSP, X-Frame-Options), protecting API routes with granular authorization checks, and verifying webhooks using signature validation (svix). Use this when deploying or auditing an application to ensure maximum security posture.

This skill provides a comprehensive guide to configuring CodeRabbit for advanced, security-focused code reviews. It teaches how to implement rules for detecting hardcoded secrets, common vulnerabilities (like SQL injection and XSS), and enforcing secure coding standards across APIs, databases, and infrastructure code. Use this when hardening a codebase's security posture or ensuring compliance with industry standards.

Automates cors policy validator tasks in the Security Fundamentals domain, offering best-practice guidance, prompt validation, and production-ready configuration snippets whenever you ask about cors policy patterns or hardening.

A comprehensive guide for setting up and maintaining Cursor IDE for enterprise and production use. It covers essential best practices including security hardening, defining project-wide coding rules, optimizing codebase indexing, ensuring data privacy compliance, and standardizing team development workflows. Essential for adopting AI coding tools in a professional environment.

Provides Django security best practices covering production settings, authentication, authorization, CSRF and SQL injection protection, plus deployment hardening to keep live apps safe.

This expert provides advanced, practical knowledge across the entire lifecycle of containerized applications. Core expertise includes multi-stage Dockerfile optimization, container security hardening (non-root users, minimal attack surface), and advanced orchestration using patterns like Docker Compose. Ideal for ensuring robust, secure, and production-ready deployments.

A comprehensive guide to building, optimizing, and deploying production-grade Docker images and containers. Covers advanced concepts such as multi-stage builds, layer caching optimization, security hardening (non-root users, secrets), health checks, and effective volume/network configuration using docker-compose.

This guide provides comprehensive best practices for securing Evernote API integrations. It covers essential topics like secure credential management using environment variables or vaults, implementing CSRF-protected OAuth flows, encrypting access tokens at rest using AES-256-GCM, rigorous input validation, and ensuring secure logging practices by redacting sensitive data. Use this when hardening your application against data breaches.

This comprehensive guide details essential security practices for integrating the Exa API. It covers key areas such as secure API key management using environment variables, implementing content moderation to filter unsafe results, restricting results via domain allow/block lists, and sanitizing user queries to prevent injection attacks. Use this when hardening or auditing an Exa-powered application.

Performs authorized file path traversal assessments to map web inputs, craft traversal payloads, and document sensitive files that can be read, aiding defenders in hardening filesystem handling during security reviews.

Guides Kubernetes operators through workload design, manifest generation, security hardening, networking, storage, GitOps, and multi-cluster operations while ensuring probes, resource limits, and least-privilege policies.