Skill UI

This skill provides advanced, dual-use security techniques for analyzing protected binaries, including malware and proprietary software. It is strictly intended for authorized security professionals, such as those conducting penetration testing, malware analysis, or academic security research (CTFs). Users must exercise extreme caution, confirm explicit written authorization, and ensure all activities remain within defined legal and ethical scopes to prevent misuse and legal violations.

This skill provides advanced, dual-use security techniques for analyzing protected binaries, including malware and proprietary software. It is strictly intended for authorized security professionals, such as those conducting penetration testing, malware analysis, or academic security research (CTFs). Users must exercise extreme caution, confirm explicit written authorization, and ensure all activities remain within defined legal and ethical scopes to prevent misuse and legal violations.

Provides industry-standard patterns and modern best practices for building secure, scalable authentication and authorization systems. This guide helps developers implement complex identity management features, such as OAuth2, OpenID Connect (OIDC), JWT validation, session management, and Role-Based Access Control (RBAC), ensuring APIs and services adhere to the highest security standards.

Provides industry-standard patterns and modern best practices for building secure, scalable authentication and authorization systems. This guide helps developers implement complex identity management features, such as OAuth2, OpenID Connect (OIDC), JWT validation, session management, and Role-Based Access Control (RBAC), ensuring APIs and services adhere to the highest security standards.

Guides building authentication and authorization in Next.js via NextAuth, middleware protection, JWT verification, session handling, and sign-in UI for both client and server components.

Guides building authentication and authorization in Next.js via NextAuth, middleware protection, JWT verification, session handling, and sign-in UI for both client and server components.

Overview of secure authentication and authorization patterns covering JWT access/refresh flows, middleware enforcement, OAuth2 PKCE login, RBAC permissions, and anti-patterns/checklists for modern web apps.

Overview of secure authentication and authorization patterns covering JWT access/refresh flows, middleware enforcement, OAuth2 PKCE login, RBAC permissions, and anti-patterns/checklists for modern web apps.

Ensures code complies with security best practices across authentication, input handling, file uploads, APIs, secrets, and sensitive data operations by providing a structured review checklist covering secrets management, validation, injection prevention, authorization, XSS, and CSRF safeguards.

Build production-ready GraphQL servers with SDL-first or code-first schemas, resolvers using DataLoader batching, field-level authorization, query complexity guards, and WebSocket subscriptions for realtime APIs.

Provides Django security best practices covering production settings, authentication, authorization, CSRF and SQL injection protection, plus deployment hardening to keep live apps safe.

Provides expert .NET/C# backend work for ASP.NET Core 8+ APIs, covering EF Core data access, authentication/authorization, background services, performance tuning, and production-ready patterns for enterprise services.