Skill UI

A comprehensive guide for developers on building secure and robust APIs across REST, GraphQL, and WebSocket protocols. It covers essential security patterns including robust authentication (JWT, OAuth 2.0), granular authorization (RBAC), input validation to prevent injection attacks (SQLi, XSS), rate limiting, and best practices for data encryption and secure headers. Essential for developers preparing for security audits.

This skill provides a comprehensive checklist for performing rigorous code security reviews. It covers critical areas such as secrets management, input validation, preventing SQL injection, secure authentication (JWT, RLS), and mitigating XSS/CSRF vulnerabilities. Essential for developers building features that handle sensitive data or user input.

An expert developer specializing in secure backend coding practices, vulnerability mitigation, and robust API design. Proficient in preventing common attacks such as SQL injection, XSS, and CSRF. Covers comprehensive areas including input validation, authentication mechanisms (OAuth 2.0, MFA), database security, and implementing necessary security headers (CSP, HSTS) for building secure-by-design applications. Ideal for implementing security fixes or building new, hardened backend services.

Automates guidance for setting up and optimizing BigQuery scheduled queries within GCP, offering best practices, configuration templates, and validation for production-ready data workflows.

Provides comprehensive tools for managing enriched lead data in compliance with global privacy regulations like GDPR and CCPA. This skill guides practitioners through data classification (identifying PII sensitivity), input validation, deduplication, implementing data retention metadata, and anonymizing sensitive fields for secure reporting and analytics.

Provides automated guidance for designing and implementing cron job schedulers in backend projects, covering best practices, production-ready code, and validation for node.js, Python, Go, databases, and microservices patterns.

Specializes in generating production-grade SQL database migrations with zero-downtime strategies for PostgreSQL, MySQL, and SQL Server. Provides comprehensive plans covering data integrity, detailed rollback procedures, performance optimization, and validation checks for critical schema changes.

Offers automated guidance for database query profiler tasks in performance testing, including best practices, code/config generation, and validation when working with load/stress benchmarking.

A comprehensive expert for configuration management, specializing in validating, testing, and ensuring the correctness of application settings. It creates robust validation schemas (e.g., JSON Schema) and performs critical checks, including identifying potential security secrets (API keys, passwords), ensuring data consistency across different environments (development, staging, production), and enforcing type safety for reliable deployments.

Automates guidance for implementing error handler middleware in backend services, covering Node.js, Python, Go, microservices, databases, caching, messaging, and architecture best practices with production-ready code and validation.

This guide provides comprehensive best practices for securing Evernote API integrations. It covers essential topics like secure credential management using environment variables or vaults, implementing CSRF-protected OAuth flows, encrypting access tokens at rest using AES-256-GCM, rigorous input validation, and ensuring secure logging practices by redacting sensitive data. Use this when hardening your application against data breaches.

Automatically assists with generating Firebase security rules, offering best-practice guidance, template configurations, and validation checks tailored for GCP compute, storage, and data workloads.