Skill UI

A comprehensive toolkit for professional security engineers. It covers the entire security lifecycle, including systematic threat modeling using STRIDE, designing secure architectures based on Zero Trust and Defense-in-Depth, conducting detailed vulnerability assessments (SAST/DAST), and implementing secure coding practices. Ideal for security audits, compliance reviews, and building resilient systems.

Establishes Sentry governance by provisioning shared configs, enforcing PII scrubbing, environment guards, naming rules, alert templates, and compliance audits for consistent organizational usage.

Guides configuring Sentry security settings, covering data scrubbing, DSN protection, least-privilege access, audit logging, and documentation so teams can safely manage sensitive telemetry.

This skill provides comprehensive guidance on mastering smart contract security best practices within the Solidity language. It covers vulnerability prevention, secure development patterns, and methodologies for auditing existing contracts. Use this skill when developing secure DeFi protocols, preventing common attacks (like reentrancy or overflow), and optimizing contracts to standards required for professional audits.

Sets up Speak enterprise SSO, RBAC, and org/team controls so schools or businesses can enforce language-learning permissions, manage instructors, and keep audit trails for integrations.

Verifies that blockchain code precisely implements documented specifications by comparing logic, invariants, flows, and assumptions against whitepapers or design documents, flagging undocumented behavior, mismatches, and compliance gaps during audit engagements.

This skill facilitates systematic threat identification by applying the STRIDE methodology (Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege). It is crucial for conducting comprehensive security analyses, performing threat modeling sessions on new or existing system architectures, and creating robust security documentation. Use it when reviewing design decisions, preparing for compliance audits, or training teams on advanced threat identification techniques.

Scans Substrate/Polkadot FRAME pallets for seven critical vulnerabilities such as arithmetic overflow, panic DoS, incorrect weights, unsigned validation issues, bad randomness, and origin flaws, making it ideal for runtime audits and pre-launch security assessments.

Sets up Supabase Enterprise SSO and RBAC with organization management, middleware-enforced permissions, and audit logging for compliant access control workflows.

Spot and remediate Supabase anti-patterns by reviewing integrations for async, security, and performance issues, then enforce fixes with linting and CI to keep the codebase aligned with best practices.

Guides teams through Supabase best practices for securing API keys, enforcing least privilege access, and auditing configuration, so you can harden secrets handling during deployment or review cycles.

Scans FunC-based TON smart contracts for boolean, Jetton, and gas handling vulnerabilities, reporting critical issues with file references and offering remediation guidance for auditors and secure dApp launches.