Skill UI

Auto-activating security assistant that steps through SQL injection detector tasks, enforces best practices on authentication, input validation, and secure coding, and produces validated code/configuration for Security Fundamentals scenarios.

Automatically scans modern API frameworks (Next.js, Express, FastAPI, Django) to generate comprehensive, ready-to-run test suites. It ensures complete coverage for critical areas including authentication, input validation (boundary/injection), error code matrices, pagination, file uploads, and rate limiting. Ideal for TDD, contract testing, and security audits.

A comprehensive guide and skill for building robust, production-ready REST API endpoints. This skill covers full lifecycle development, including input validation, centralized error handling, authentication/authorization checks, CRUD operations, pagination, and generating proper API documentation. It ensures that back-end services are secure, scalable, and adhere to industry best practices.

Provides production-ready guidance for Zod schema validation in TypeScript, covering primitives, objects, unions, coercions, refinements, transformations, custom errors, and integrations with React Hook Form, Next.js, and tRPC to validate API inputs and forms.

Provides a Perl-centric security checklist covering taint mode, strict input validation, safe regex, file/command handling, and DBI parameterization to harden web and CLI applications before processing untrusted data.

Guides comprehensive API security testing for REST, GraphQL, and gRPC services using the OWASP API Security Top 10, combining Burp Suite, Postman, and custom scripts to validate authentication, authorization, rate limiting, input validation, and business logic defenses.

Guide for configuring Fluentd and Fluent Bit to centralize log aggregation, routing, filtering, and enrichment, with endpoint inputs, central aggregator setup, validation, testing, and deployment reporting tailored for security-conscious environments.

Guides systematic OWASP WSTG web app penetration tests using Burp Suite plus manual techniques to uncover authentication, authorization, input validation, session, and business logic vulnerabilities for compliance and preproduction assurance.

Guides security-first development with defensive input validation, auth handling, data protection, and OWASP prevention steps for any feature touching external data or sessions.