Skill UI

A specialist in building highly interactive, spatial, and weightless web interfaces using advanced techniques like GSAP, 3D CSS transforms, and React. This skill excels in implementing modern visual trends such as glassmorphism and isometric grids, providing a premium, immersive feel for sophisticated dashboards and landing pages.

Handles QA code review reports by prioritizing critical and warning findings, implementing fixes with tests, running verification checklists, and preparing re-verification reports via the Forja Dev agent.

An expert guide for developing production-grade AI applications, chatbots, and generative UIs using the Vercel AI SDK, Next.js, and React. Covers core concepts including streaming text (`streamText`), managing chat state (`useChat`), implementing complex tool/function calling, and ensuring robust structured data generation (JSON schemas) across multiple LLM providers.

A comprehensive engineering stack for designing and implementing robust, production-grade payment gateways for Software-as-a-Service (SaaS) platforms targeting the Pakistani market. It covers integrating major local providers like JazzCash and Easypaisa, handling complex payment flows (PKR billing, webhooks, idempotency), and performing essential financial reconciliation and auditing processes. This guide ensures high correctness and reliability in B2B/SaaS billing operations in Pakistan.

This skill provides methods for reliably extracting typed, validated, and structured data from Large Language Models (LLMs), moving beyond simple text parsing. It covers best practices across major APIs (OpenAI's response_format, Anthropic's tool_use, Google's responseSchema) and local models. Key workflows include defining schemas (Pydantic/Zod), implementing constrained decoding, and building robust retry loops for production-grade data pipelines.

A comprehensive guide to integrating privacy protections into software architecture from the ground up. This skill ensures compliance with major global regulations like GDPR, CCPA, and LGPD by implementing core principles such as data minimization, purpose limitation, and default privacy settings. Essential for developers building any application that handles personal user data.

Implements AES-256-GCM encryption for data at rest, covering key derivation, nonce management, streaming large files, and authenticated encryption to prevent tampering during storage.

Implements SOC alert fatigue reduction by tuning noisy detection rules, consolidating duplicate alerts, and applying risk-based alerting so analysts remain effective when false positives and alert volumes spike.

Implements API abuse detection with token bucket, sliding window, adaptive rate limiting and Redis-backed counters to block DDoS, brute-force, and credential stuffing while feeding observability data so teams can tune protections.

Securely generates, stores, scopes, rotates, and monitors API keys to help server-to-server services protect credentials from leakage and abuse.

Implements rate limiting and throttling controls via token bucket, sliding window, and fixed window strategies with Redis counters, gateway plugins, or middleware, returning HTTP 429/Retry-After to defend auth and API endpoints from brute force, abuse, and resource exhaustion.

Implements OpenAPI/JSON Schema validation so API gateways and CI pipelines enforce request and response contracts, blocking injection, mass assignment, and data-leakage risks while keeping type safety across deployments.