Skill UI

This comprehensive guide teaches the correct usage of the Flutter `provider` package for state management. It covers setting up various provider types (immutable, mutable, future, stream) and emphasizes best practices for consuming state safely using `context.watch`, `context.read`, and `Selector`. Learn how to use `ProxyProvider` for dependency injection and maintain robust, scalable Flutter applications.

Security-first guidance for hardening applications against injection, XSS, auth flaws, and data exposure. Use it when handling untrusted input, sessions, secrets, uploads, or third-party integrations.

Covers comprehensive HTML injection attack scenarios, detection tips, and tooling so security testers can validate and document injection points, phishing overlays, and reflected or stored payloads during vulnerability assessments.

This comprehensive guide outlines best practices for writing high-quality, scalable, and maintainable code in .NET/C#. It covers core architectural principles, including SOLID, dependency injection, and design patterns (e.g., Command Handler). Furthermore, it addresses modern challenges such as structured logging, async/await patterns, secure coding, robust testing standards, and advanced AI integration using Semantic Kernel.

This comprehensive guide outlines established best practices for developing robust, scalable, and high-quality enterprise applications using Spring Boot and Java. It covers structuring projects, implementing dependency injection, designing RESTful APIs, managing transactions, securing endpoints, and utilizing advanced testing strategies (Unit, Integration). Ideal for developers aiming for industry-standard code quality.

This comprehensive guide outlines best practices for developing high-quality, idiomatic, and maintainable enterprise applications using Kotlin and Spring Boot. It covers architectural patterns, dependency injection using primary constructors, managing state with data classes, implementing robust RESTful APIs, handling transactions, and leveraging Kotlin features like null safety and Coroutines for asynchronous programming. It also provides guidance on modern testing strategies (Kotest, Testcontainers).

This skill performs a comprehensive security audit of Model Context Protocol (MCP) server configurations found in .mcp.json files. It is designed to identify critical vulnerabilities, including hardcoded secrets (API keys, tokens), dangerous shell injection patterns, unpinned dependencies, and compliance issues regarding approved server lists. Use this skill during security reviews, project onboarding, or pre-commit checks to ensure secure deployment.

This comprehensive guide outlines essential best practices and structural checks for developing robust Salesforce Apex code. It covers critical areas such as preventing governor limit exceptions (e.g., bulk safety), enforcing security (CRUD/FLS), preventing SOQL injection, adhering to sharing models, and implementing modern Apex idioms. It also mandates rigorous testing strategies (Positive, Negative, Bulk) and proper trigger architecture.

Checks AI agent implementations against the OWASP Agentic Security Initiative Top 10 risks, producing findings on controls, vulnerabilities, and recommendations for prompt injection, tool governance, escalation, logging, identity, policy, supply chain, and behavioral monitoring before production or audit.

Skill that demonstrates injected eval patterns for security testing, simulating a dangerous workflow that executes fetched payloads and unsafe user input handling to help assess protection measures.

A universal assistant for conducting deep code reviews across major SQL databases (MySQL, PostgreSQL, SQL Server, Oracle). It rigorously analyzes SQL code for critical vulnerabilities (like SQL injection), performance bottlenecks, maintainability issues, and adherence to industry best practices. Features include security audits, index optimization recommendations, query structure analysis, and schema design validation, ensuring robust and secure database development.

Provides comprehensive security guidelines for integrating Anthropic Claude API. Covers essential best practices including secure API key management (rotation, isolation), defending against prompt injection attacks by separating system instructions from user input, robust input sanitization, and output validation to prevent accidental data leakage. Essential for building production-grade, secure AI applications.