Skill UI

Automatically scans modern API frameworks (Next.js, Express, FastAPI, Django) to generate comprehensive, ready-to-run test suites. It ensures complete coverage for critical areas including authentication, input validation (boundary/injection), error code matrices, pagination, file uploads, and rate limiting. Ideal for TDD, contract testing, and security audits.

A comprehensive guide and skill for building robust, production-ready REST API endpoints. This skill covers full lifecycle development, including input validation, centralized error handling, authentication/authorization checks, CRUD operations, pagination, and generating proper API documentation. It ensures that back-end services are secure, scalable, and adhere to industry best practices.

Master the Zod library for defining robust, type-safe schemas in TypeScript. This expert covers advanced validation techniques, including primitives, objects, unions, and discriminated unions. It specializes in type inference (`z.infer`), data coercion, complex refinements, and seamless integration with modern frameworks like React Hook Form, Next.js, and tRPC, ensuring consistency across your application state and API inputs.

A comprehensive framework for penetration testing APIs, designed to detect and exploit critical injection flaws. It covers SQL injection (SQLi), NoSQL injection, OS command injection, LDAP injection, and Server-Side Request Forgery (SSRF). This skill guides the testing of all input vectors—including path parameters, headers, query strings, and request bodies—to assess input validation and backend security posture against industry standards like OWASP.

This guide details how to implement robust API schema validation using OpenAPI Specification (OAS) and JSON Schema. It enforces strict input/output contracts, preventing critical vulnerabilities such as injection attacks (SQLi, XSS), data leakage, and mass assignment by validating data types and structure at the API gateway or development level.

This comprehensive guide provides essential security protocols for building robust Laravel applications. It covers best practices for authentication (Sanctum, Passport), authorization (Policies), input validation, and protecting against common vulnerabilities like CSRF, XSS, and SQL injection. Key topics include secure file uploads, rate limiting, environment variable management, and implementing robust middleware.

This guide details the technique and workflow for executing HTTP Parameter Pollution (HPP) attacks. HPP exploits how web applications and back-end systems handle duplicate HTTP parameters (e.g., first-wins, last-wins, concatenation). It is a critical method for bypassing Web Application Firewalls (WAFs), testing input validation logic, and identifying vulnerabilities in API, OAuth, and payment processing flows.

Provides comprehensive security guidelines for integrating Anthropic Claude API. Covers essential best practices including secure API key management (rotation, isolation), defending against prompt injection attacks by separating system instructions from user input, robust input sanitization, and output validation to prevent accidental data leakage. Essential for building production-grade, secure AI applications.

A comprehensive guide detailing security best practices for integrating and managing enterprise search with Glean. It covers critical topics such as indexing token management, validating webhook signatures, implementing input validation using Zod, and techniques for data redaction, ensuring that sensitive information is protected across the entire search lifecycle.

This guide details essential best practices for securing applications integrated with Anthropic's Claude API. It covers critical security measures including secure API key management (server-side only), robust input validation to prevent cost attacks, defense mechanisms against prompt injection, and implementing per-user rate limiting. Essential reading for maintaining data privacy and system integrity in production environments.

This skill provides a comprehensive framework for conducting high-quality code reviews. It guides developers through checking code across four critical dimensions: Correctness (functional accuracy and edge cases), Maintainability (readability and documentation), Performance (efficiency and resource usage), and Security (input validation and vulnerability management). It also emphasizes providing actionable, constructive, and empathetic feedback.

Provides comprehensive security guidelines and code patterns for integrating with the Fathom API. This module covers critical security concerns such as API key management, webhook signature verification, PII (Personally Identifiable Information) redaction, and robust input validation. It ensures compliance and protects highly sensitive meeting transcripts and confidential business data in production environments.