Skill UI

An expert guide to designing secure, performant GraphQL APIs covering schema design, resolvers, federation, DataLoader batching, subscriptions, and client integration with Apollo/urql, including advice on when REST may be preferable.

This skill provides comprehensive guidance for senior-level Laravel engineering. It focuses on building production-grade, maintainable, and highly secure applications using modern architectural patterns (clean architecture, services, etc.). Use this when developing new features, refactoring complex code, designing robust APIs, or optimizing database interactions within a Laravel environment. Adheres to best practices like Eloquent optimization and proper authentication flows.

Develop robust, multi-channel enterprise agents designed for the Microsoft 365 ecosystem, including Teams and Copilot Studio. This SDK provides a comprehensive Python framework featuring aiohttp hosting, advanced AgentApplication routing, real-time streaming responses, and secure authentication via MSAL. Ideal for building sophisticated, production-grade bots and automation tools that integrate deeply with enterprise Microsoft services.

This tool is designed to collect comprehensive diagnostic evidence for troubleshooting Perplexity API issues. It automatically gathers critical environment details (OS, Node/Python versions), tests API connectivity, and captures redacted configuration settings. The resulting secure bundle is ideal for submitting detailed support tickets or sharing with technical teammates.

Security workflow that guides from threat modeling through secure design, authentication and input validation, header hardening, encryption, and OWASP defenses for production services.

Provides authentication, authorization, encryption, secrets, and hardening patterns for designing secure auth flows, managing tokens, configuring CORS, and implementing best practices around API keys, JWT, OAuth, and rate limiting.

An expert architect specializing in designing and optimizing service mesh using industry leaders like Istio and Linkerd. This skill provides deep knowledge of cloud-native networking patterns, enabling secure, reliable microservices communication. It covers advanced topics including zero-trust networking, mTLS configuration, sophisticated traffic management (e.g., canary and blue-green deployments), observability integration, and multi-cluster federation.

A specialized methodology for reviewing APIs, configuration schemas, and interfaces to identify 'footguns'—design choices where the path of least resistance leads to insecurity. This analysis focuses on making secure usage the default, covering topics like dangerous defaults, primitive vs. semantic type safety, and insecure algorithm selection. It is crucial for architects and reviewers to prevent developer misuse at the design level.

This comprehensive guide outlines the best practices and structured methodology for developing specialized skills for AI coding agents. It provides detailed instructions on integrating Azure SDKs and Microsoft Foundry services, covering crucial topics like secure authentication patterns (DefaultAzureCredential), modular workflow design, and maintaining concise, effective knowledge context for optimal agent performance.

A specialized skill for conducting comprehensive security architecture reviews, risk assessments, and threat identification. It masters advanced methodologies like STRIDE, PASTA, and attack tree construction. Use this to build secure-by-design systems, identify potential attack vectors, and strengthen system resilience before deployment.

A comprehensive checklist designed to ensure TwinMind integrations are deployed securely, stably, and compliantly in a production environment. It covers critical best practices across multiple domains, including authentication, data encryption (PII, GDPR), robust infrastructure setup (auto-scaling, load balancing), advanced monitoring (metrics, tracing, alerting), and full CI/CD deployment workflows. Use this when preparing for go-live or conducting production audits.

This skill provides robust guidelines and patterns for managing environment variables and sensitive credentials securely. It is designed to ensure that secrets, API keys, and other confidential information are never accidentally exposed or logged in Claude sessions, terminal outputs, development logs, or version control commits (like Git). Use this skill when handling sensitive data in development workflows to maintain maximum security.