Skill UI

A comprehensive guide for integrating Plaid API into fintech applications. Covers secure link token creation, public token exchange for persistent access tokens, and real-time transaction synchronization using the /transactions/sync endpoint. Includes best practices for identity verification, ACH authentication, and webhook handling, ensuring robust financial data connectivity.

This comprehensive guide provides solutions for common PostHog integration issues, helping developers diagnose and fix tracking failures. It covers critical topics including event capture problems, feature flag misbehavior, API authentication errors (401/429), and user identity fragmentation. Learn best practices for robust data analytics implementation.

This guide details implementing robust Role-Based Access Control (RBAC) within a PostHog Enterprise environment. It covers managing the three-level hierarchy (Organization > Project > Resource), assigning granular member roles (Owner, Admin, Member), configuring scoped API keys for secure integrations, and enforcing enterprise-grade authentication via SSO/SAML. Includes steps for setting up project permissions and auditing system changes.

An end-to-end workflow for building robust, production-ready Python backend APIs. This guide covers all stages, including project scaffolding, SQLAlchemy database integration, Pydantic validation, implementing JWT/OAuth2 authentication, comprehensive error handling, unit testing, and Docker deployment for modern microservices.

This comprehensive workflow guides developers through building a production-ready, full-stack web application entirely within the Replit environment. It covers setting up the entire architecture, including Express/Flask backend logic, robust PostgreSQL database integration for persistent data, implementing secure user authentication using Replit Auth, and managing file uploads via Object Storage. It is the definitive guide for launching a complex, scalable SaaS project from scratch.

This skill guides users through building a minimal yet comprehensive working application on the Replit platform. It demonstrates how to integrate and use core platform services such as the built-in Key-Value Database, Object Storage for file handling, user Authentication, and standard web frameworks (Express/Flask). Use this guide when starting a new Replit project or when learning the foundational infrastructure services provided by the platform.

This guide provides a comprehensive setup for Replit applications. It covers configuring essential files like .replit and replit.nix for dependency management, securely managing environment secrets (AES-256), and integrating robust user authentication via Replit Auth (supporting Google, GitHub, etc.). Ideal for starting a new, production-ready Replit project.

This skill provides comprehensive guardrails for securing Replit-hosted applications. It covers critical security policies including preventing hardcoded secrets, implementing resource usage limits (CPU/Memory), enforcing endpoint authentication, and ensuring proper deployment configuration. Use this when you need to harden a Replit app for production or audit its security posture.

A comprehensive guide detailing security best practices for building and deploying applications on the Replit platform. Learn how to properly manage sensitive data using Replit Secrets (AES-256 encryption), implement secure service-to-service authentication via REPL_IDENTITY tokens, validate custom headers, and prevent common vulnerabilities like hardcoded API keys and SQL injection. Essential for auditing and securing production environments.

Runs a predefined suite of smoke tests to verify key application functionality, authentication, integrations, and system health after deployments, upgrades, or configuration updates.

A comprehensive tool for detecting critical API security vulnerabilities, including injection, broken authentication (BOLA), excessive data exposure, and mass assignment. It audits endpoints against the OWASP API Security Top 10 standards by analyzing source code, middleware chains, and request validation logic. Ideal for pre-deployment security gates, CI/CD integration, and compliance audits.

Secret Scanner Assistant auto-activates within Security Fundamentals to guide you on secret detection, authentication, validation, secure coding, and vulnerability checks with best practices.