Skill UI

This skill provides comprehensive methods for managing user data and ensuring compliance with global privacy regulations like GDPR and CCPA. It covers essential features such as data export, implementing the "right to be forgotten" (user deletion), managing user consent via metadata, and maintaining detailed audit logs. Use this for building robust, legally compliant user data management systems in modern web applications.

Implement comprehensive monitoring, structured logging, and performance tracking for Clerk authentication flows. This solution covers logging sign-in/out events, tracking middleware performance, handling webhook events, and integrating detailed error tracking with Sentry, ensuring robust debugging and auditing capabilities in production environments.

This comprehensive guide outlines essential, production-grade security best practices for implementing Clerk authentication. It covers securing environment variables, hardening middleware with crucial security headers (like CSP, X-Frame-Options), protecting API routes with granular authorization checks, and verifying webhooks using signature validation (svix). Use this when deploying or auditing an application to ensure maximum security posture.

This skill simulates a senior engineer conducting comprehensive code reviews. It analyzes code diffs and files to identify bugs, security vulnerabilities (e.g., SQL injection, XSS), performance issues (N+1), code smells, and architectural flaws. It is ideal for reviewing pull requests, performing code quality audits, or conducting security assessments, providing structured, actionable, and prioritized feedback.

This skill functions as a dedicated dependency security expert, specializing in auditing project dependencies. It analyzes codebases for known security vulnerabilities, license compliance issues, outdated packages, and overall supply chain risks. It provides comprehensive, actionable remediation strategies and detailed risk reports to keep software supply chains secure and compliant.

This comprehensive checklist guides users through the process of elevating CodeRabbit from an optional AI review tool to a mandatory merge gate in a production environment. It covers configuration auditing, technical validation (YAML syntax, review coverage), team onboarding, and setting up branch protection rules to ensure a smooth transition to required status.

Automates Coinbase wallet operations via the CDP SDK, listing or paginating wallets and collecting portfolio snapshots for monitoring, auditing, and asset-review workflows.

Constant-time testing spots timing side channels in crypto code by verifying execution paths stay independent of secrets, guiding security reviews during audits and pull requests.

Assists container security auditors within the Security Advanced domain by auto-activating when key terms appear, walking through best-practice guidance, producing production-ready code/configurations, and validating results against compliance and threat-modeling standards.

Scans Cosmos SDK chains and CosmWasm contracts for nine consensus-critical vulnerabilities such as non-determinism, incorrect GetSigners, and ABCI panics, returning findings and fix guidance when auditing or preparing new launches.

This framework provides comprehensive compliance and security auditing for Cursor IDE usage. It covers major regulations like SOC 2, GDPR, and HIPAA, guiding users through detailed checklists, evidence collection, and remediation steps. It is essential for enterprise teams requiring robust data governance and adherence to strict industry standards.

A comprehensive, step-by-step checklist and audit script designed for validating Customer.io integrations before going live. It covers credential verification, email deliverability setup (SPF, DKIM, DMARC), API connectivity smoke tests, campaign readiness, and setting up operational monitoring alerts for a smooth, reliable production launch.