Skill UI

An expert tool for generating comprehensive C4 Code-level documentation. It analyzes existing code directories to automatically extract and document critical architectural details, including function signatures, class definitions, method dependencies, and internal data flows. It supports generating various Mermaid diagrams (classDiagram, flowchart) to visualize complex system components, ensuring accurate and maintainable technical documentation.

Scans Cairo/StarkNet smart contracts for six critical issues spanning felt252 arithmetic, messaging, access control, and signature replay, reporting severity and fixes to support audits, bridge reviews, and pre-launch security checks.

This guide details security best practices for integrating with Clay. It covers securing API keys, validating webhook signatures, isolating provider credentials, and redacting sensitive PII data. Essential for maintaining compliance and data integrity in production environments.

A comprehensive guide and implementation framework for managing real-time data flow using Clay's event-driven architecture. This skill covers both inbound webhooks (POSTing data into Clay tables) and outbound HTTP API callbacks (receiving enriched data from Clay). It provides production-ready TypeScript code for setup, signature verification, and idempotent processing, enabling robust, event-driven integrations.

This comprehensive guide outlines essential, production-grade security best practices for implementing Clerk authentication. It covers securing environment variables, hardening middleware with crucial security headers (like CSP, X-Frame-Options), protecting API routes with granular authorization checks, and verifying webhooks using signature validation (svix). Use this when deploying or auditing an application to ensure maximum security posture.

Learn how to configure and implement robust backend endpoints to handle webhooks from Clerk. This guide covers processing user lifecycle events (creation, update, deletion) and organization events, ensuring seamless data synchronization to your external database. It emphasizes secure practices like Svix signature verification and idempotency protection.

This comprehensive guide details how to implement robust webhook endpoints for CodeRabbit, an AI-powered code review tool. It covers essential security practices, including signature validation (HMAC-SHA256), and provides structured methods for handling various event types (e.g., PR reviews, check run completions, comments). Use this skill when integrating CodeRabbit into CI/CD pipelines to automate notifications, track metrics, and enforce quality gates.

Builds robust and secure webhook receiver endpoints capable of handling events from external services (e.g., Stripe, GitHub). Key features include HMAC signature verification, idempotency checking, and asynchronous queue processing to prevent timeouts and ensure reliable event ingestion.

This comprehensive guide details essential security best practices for integrating with Customer.io. It covers secure credential storage using secrets managers, sanitizing Personally Identifiable Information (PII) via hashing, verifying webhook signatures (HMAC-SHA256) to ensure data integrity, and establishing procedures for API key rotation to maintain compliance with GDPR/CCPA regulations.

This guide implements Deepgram's callback and webhook mechanism for handling asynchronous audio transcription. It provides a complete workflow, including submitting audio for background processing, setting up a secure webhook endpoint (with HMAC signature verification), and managing job status using Redis. Essential for integrating robust, delayed voice processing results into a production backend system.

Automates Esignatures IO operations through the Composio toolkit using Rube MCP, guiding users to discover tools, verify active connections, and execute compliant workflows with session-aware calls.

This guide outlines essential security best practices for integrating Firecrawl. It covers secure API key storage (using environment variables and .gitignore), verifying webhook signatures with HMAC-SHA256 for data integrity, implementing key rotation strategies across different environments (dev/staging/prod), and sanitizing scraped content to mitigate XSS and PII risks. Essential for building secure, production-grade systems.