Skill UI

This guide provides comprehensive patterns for designing and implementing secure multi-tenant SaaS applications using shared databases. It covers critical techniques like Row-Level Security (RLS) in PostgreSQL, implementing tenant-aware middleware in TypeScript (Express/Fastify), and enforcing data scoping at the ORM level (Prisma/Drizzle). Learn how to prevent data leakage and manage tenant isolation across shared schemas.

This guide details establishing confidential computing environments using AWS Nitro Enclaves for hardware-level isolation. It covers building secure enclaves for sensitive data (PII, PHI), configuring cryptographic attestation workflows, and integrating KMS policies using PCR-based conditions. Learn to harden workloads by moving secret decryption into isolated, verifiable hardware boundaries.

This guide provides comprehensive best practices for writing robust and effective unit tests using JUnit 5 in Java. It covers standard test structures (Arrange-Act-Assert), advanced data-driven testing using parameterized methods, best assertion practices (including AssertJ), and dependency isolation using mocking frameworks like Mockito. Ideal for developers aiming to improve code coverage and test reliability.

A comprehensive methodology for pinpointing the root cause of complex bugs, regressions, or unexpected behavior in large codebases. Techniques include binary search debugging, Git bisect for tracking regressions across commits, strategic data/control flow logging, component isolation, and advanced breakpoint strategies (conditional breakpoints, watch expressions). Ideal for scenarios where the bug source is unclear or difficult to reproduce.

A comprehensive guide and mechanism for ensuring development work occurs in an isolated environment using native worktree tools or falling back to manual git worktree creation. It guides users through mandatory steps like detecting existing isolation, prioritizing native tools, and verifying the clean state before development begins.

This specialized skill automates the process of converting visual designs (from Stitch) into high-quality, modular React and Vite components. It adheres to modern frontend best practices, enforcing logic isolation via custom hooks, data decoupling using mock data files, and ensuring type safety with TypeScript interfaces. The workflow includes automated asset fetching, style mapping (Tailwind), and rigorous validation cycles to produce production-ready, maintainable code.

Provides technology-agnostic guidance for architecting and reviewing modular systems. This skill covers core architectural principles such as bounded contexts, state isolation, explicit contracts, and failure containment. Use it when determining service boundaries, assessing coupling between domains, or designing new greenfield architectures without assuming a specific framework, language, or repository structure.

This guide demonstrates how to implement robust Role-Based Access Control (RBAC) for Algolia Enterprise environments. It covers defining granular permissions using ACLs, generating Secured API Keys for strict multi-tenant data isolation, and building middleware to validate service permissions, ensuring the principle of least privilege in large-scale applications.

Provides comprehensive security guidelines for integrating Anthropic Claude API. Covers essential best practices including secure API key management (rotation, isolation), defending against prompt injection attacks by separating system instructions from user input, robust input sanitization, and output validation to prevent accidental data leakage. Essential for building production-grade, secure AI applications.

This utility provides a structured way to manage and separate notes across multiple accounts and environments within Apple Notes. By utilizing distinct accounts (e.g., iCloud for Production, 'On My Mac' for Development), users can ensure absolute data isolation between development, staging, and live production data. It is crucial for maintaining clean separation in complex development workflows and QA testing scenarios.

A comprehensive guide detailing how to securely configure and manage Canva Connect API integrations across development, staging, and production environments. This resource covers environment strategy, best practices for OAuth credential management, secret handling (AWS, GCP, Vault), and implementing environment isolation guards to ensure secure and scalable deployments.

Implements a robust, multi-tenant authorization layer for Cohere API v2. This solution enforces Role-Based Access Control (RBAC), manages individual API keys per team, and implements per-team usage limits and daily budget tracking. It is essential for large-scale applications requiring strict resource isolation and cost governance across multiple internal services.