Skill UI

Detects fail-open insecure defaults such as hardcoded secrets, weak auth, or permissive security that allow production apps to run unsafely, guiding auditors through discovery, verification, confirmation, and reporting steps during security reviews or deployment validation.

Provides ISO 27001 ISMS audit and certification guidance, covering program planning, risk-based execution, Annex A control assessment, finding management, and Stage 1/Stage 2 documentation support for compliance teams.

Comprehensive reference for designing Spring Boot entities, repositories, transactions, pagination, and pooling with JPA/Hibernate patterns plus auditing, indexing, and caching strategies.

This module provides a compliance-grade, tamper-evident logging solution for tracking all Kling AI operations. It records task submissions, status changes, and credential usage into structured, hashed logs. Use this when meeting regulatory compliance requirements or preparing for internal/external security audits.

A comprehensive framework for assessing the security, privacy, and compliance posture of Kling AI integrations. It covers crucial areas such as data residency, credential management, content policy adherence, and GDPR compliance (e.g., right to erasure). Use this guide when preparing for security audits or implementing robust data handling protocols for AI-generated content.

This guide outlines essential security practices for deploying production-grade LLM applications using LangChain. It covers secure secrets management, defending against prompt injection, implementing sandboxed tool execution, validating model outputs for sensitive data, and setting up comprehensive audit logging, ensuring robust and secure AI deployment.

A specialized security auditor for Laravel applications. It analyzes code, APIs, and configurations against OWASP standards to detect vulnerabilities such as XSS, IDOR, SQL injection, and misconfigurations. Ideal for reviewing backend logic to ensure robust data protection and authorization.

This comprehensive checklist provides best practices and patterns for deploying Linear integrations to a production environment. It covers critical areas including robust authentication and secure secret management, error handling and system resilience (rate limiting, timeouts), performance optimization (caching, batching), and setting up full observability (health checks, structured logging). Use this when preparing for a go-live or auditing existing deployments.

This skill enforces mandatory code quality assurance by executing industry-standard validation tools before any code is considered complete or committed. It covers linting (style and syntax checking), type checking (for TypeScript and Python), and security auditing (e.g., npm audit, bandit). It ensures developers maintain a high standard of code reliability across diverse ecosystems like Node.js and Python.

Implement robust, structured logging for API requests, capturing performance metrics, correlation IDs, and detailed security audit trails. This skill ensures compliance by handling PII redaction and providing comprehensive, JSON-formatted logs suitable for ELK Stack or Loki. Essential for debugging, performance analysis, and maintaining SOC 2 compliance in distributed microservices.

This comprehensive script suite provides a structured, multi-step audit for internationalization (i18n) integrations using Lokalise. It automates crucial checks, including verifying translation coverage across all required locales, detecting key synchronization issues (missing or orphaned keys) between the source code and the Translation Management System (TMS), and validating the format of localized files. Use this utility before any major production deployment or go-live phase to ensure localization readiness.

This guide teaches comprehensive security hardening for API integrations. Learn best practices for credential management (using environment variables/secret managers), implementing git hooks to prevent secret leaks, robust input validation (using Zod), structured audit logging, and mandatory key rotation procedures, ensuring system compliance and operational security.