Skill UI

This skill performs a comprehensive security audit of Model Context Protocol (MCP) server configurations found in .mcp.json files. It is designed to identify critical vulnerabilities, including hardcoded secrets (API keys, tokens), dangerous shell injection patterns, unpinned dependencies, and compliance issues regarding approved server lists. Use this skill during security reviews, project onboarding, or pre-commit checks to ensure secure deployment.

A comprehensive guide for engineers, architects, and DevOps teams on implementing General Data Protection Regulation (GDPR) best practices. This skill covers Privacy by Design, data minimization, purpose limitation, retention policies, secure API design, and compliant logging practices. Use it when handling any personal data, designing new features, or reviewing systems for data privacy compliance.

A universal assistant for conducting deep code reviews across major SQL databases (MySQL, PostgreSQL, SQL Server, Oracle). It rigorously analyzes SQL code for critical vulnerabilities (like SQL injection), performance bottlenecks, maintainability issues, and adherence to industry best practices. Features include security audits, index optimization recommendations, query structure analysis, and schema design validation, ensuring robust and secure database development.

This skill integrates an AI agent (Clawdbot) with Signal, one of the most private messaging platforms. It enables automated communication by utilizing the signal-cli tool to perform actions such as sending messages, sending files, reacting, and replying within a designated chat channel. Ideal for building secure, automated bot interactions in private messaging environments.

This comprehensive checklist guides developers through the necessary steps to deploy a robust and reliable Grammarly API integration in a production environment. It covers critical aspects such as secure credential storage, rate limit handling, implementing text chunking, designing error resilience patterns (circuit breakers, retries), and establishing comprehensive monitoring and alerting systems to ensure high content quality and system uptime.

This comprehensive guide details setting up a secure Canva Connect API integration using the OAuth 2.0 Authorization Code flow with PKCE (Proof Key for Code Exchange). It covers the entire lifecycle: client registration, token generation, code exchange for access tokens, and refreshing expired tokens. Use this skill when building applications that require programmatic access to Canva's design and asset management capabilities.

A comprehensive skill for implementing secure, real-time webhook endpoint handling for Canva. This module covers receiving and verifying signed JWT payloads using JWK keys, enabling your application to react instantly to various user interactions (e.g., comments, design sharing, access requests). Ideal for building sophisticated SaaS integrations and automating workflows based on Canva activity.

This integration facilitates the secure deployment of Alchemy-powered decentralized applications (dApps) across major cloud platforms like Vercel and Google Cloud Run. It is designed to ensure that sensitive Alchemy API keys are treated as server-side secrets, preventing client-side exposure. Use this when setting up backend services, RPC proxies, or deploying production-grade Web3 applications requiring secure access to blockchain data.

This guide outlines critical security best practices for design-to-code pipelines using Anima and Figma. It covers securing API credentials by restricting token scopes (e.g., read-only access for Figma), enforcing server-side execution for SDKs, and implementing robust secret management using cloud services like GCP Secret Manager. This minimizes the risk of credential leakage in CI/CD environments.

This guide provides comprehensive instructions on setting up and authenticating with the Figma REST API. It covers two primary authentication methods: Personal Access Tokens (PATs) for server-side scripting, and the OAuth 2.0 flow for building user-facing applications. Learn how to generate tokens, manage granular scopes, and securely integrate your code with Figma's design data.

A comprehensive checklist designed to harden Linktree API integrations for high-concurrency, production-grade reliability. It covers critical aspects including secure secrets management, rate limit handling, robust error resilience (circuit breakers, exponential backoff), comprehensive monitoring setup, and advanced security practices like webhook signature verification. Use this guide to ensure link-in-bio analytics remain accurate and system uptime is maximized under viral traffic loads.

A comprehensive technical checklist designed to ensure the robust, secure, and highly available operation of the MindTickle production integration. It covers critical areas including multi-tenant isolation, SCIM provisioning resilience, rate limit handling, and advanced error management to prevent data leaks or service disruptions.