Skill UI

This comprehensive skill guide details essential security best practices for modern application development. It covers identifying and mitigating common vulnerabilities such as hardcoded secrets, SQL injection, XSS, and CSRF. Use this when implementing authentication, handling user input, managing sensitive credentials, or building new API endpoints to ensure robust and secure code.

This skill functions as an expert in workflow automation, specializing in designing and implementing robust CI/CD pipelines and GitHub Actions workflows. It guides users through automating the entire development lifecycle—from building and testing to secure deployment. By establishing clear stages, handling secrets, and defining rollback strategies, it ensures consistency, reduces manual effort, and accelerates delivery while maintaining high quality and security standards.

This guide provides methods to implement robust data handling, secret detection, and compliance patterns within code reviews (e.g., GDPR, CCPA). It teaches users how to configure CodeRabbit to exclude sensitive files (like .env or keys), detect hardcoded secrets, limit the review scope to active source code, and ensure that PII is properly handled during the CI/CD process.

This skill provides a comprehensive guide to configuring CodeRabbit for advanced, security-focused code reviews. It teaches how to implement rules for detecting hardcoded secrets, common vulnerabilities (like SQL injection and XSS), and enforcing secure coding standards across APIs, databases, and infrastructure code. Use this when hardening a codebase's security posture or ensuring compliance with industry standards.

Detects operations in cryptographic code that leak secrets via timing side channels, guiding developers through multi-language analysis and CLI flags for warnings, filtering, architecture, and optimization levels.

Constant-time testing spots timing side channels in crypto code by verifying execution paths stay independent of secrets, guiding security reviews during audits and pull requests.

Generates production-ready Kubernetes deployment, service, ingress, and autoscaler manifests using best practices such as health checks, TLS, and resource limits. Use this when creating or updating deployments, services, ConfigMaps, Secrets, or other Kubernetes resource manifests for any application.

This skill provides a comprehensive pipeline for deploying Customer.io integrations to major production cloud platforms, including Google Cloud Run, Vercel, AWS Lambda, and Kubernetes. It details best practices for secure deployment using dedicated secrets managers, integrating robust health check endpoints, and implementing blue-green strategies, ensuring reliable and scalable CI/CD workflows.

This comprehensive guide details essential security best practices for integrating with Customer.io. It covers secure credential storage using secrets managers, sanitizing Personally Identifiable Information (PII) via hashing, verifying webhook signatures (HMAC-SHA256) to ensure data integrity, and establishing procedures for API key rotation to maintain compliance with GDPR/CCPA regulations.

This skill guides the setup and management of Databricks resources across development, staging, and production environments. It covers best practices for using isolated workspaces, managing environment-specific secrets, implementing Asset Bundles, and integrating with CI/CD pipelines to ensure consistent and reliable data deployments.

Provides comprehensive instructions for deploying Deepgram transcription services into various production environments. This guide covers building production-ready Docker images, configuring Docker Compose, setting up robust Kubernetes manifests (including HPA and secrets), and implementing serverless handlers for platforms like AWS Lambda. Essential for scaling Deepgram services reliably and securely in the cloud.

A comprehensive expert for configuration management, specializing in validating, testing, and ensuring the correctness of application settings. It creates robust validation schemas (e.g., JSON Schema) and performs critical checks, including identifying potential security secrets (API keys, passwords), ensuring data consistency across different environments (development, staging, production), and enforcing type safety for reliable deployments.