Skill UI

This comprehensive guide outlines essential, production-grade security best practices for implementing Clerk authentication. It covers securing environment variables, hardening middleware with crucial security headers (like CSP, X-Frame-Options), protecting API routes with granular authorization checks, and verifying webhooks using signature validation (svix). Use this when deploying or auditing an application to ensure maximum security posture.

Learn how to configure and implement robust backend endpoints to handle webhooks from Clerk. This guide covers processing user lifecycle events (creation, update, deletion) and organization events, ensuring seamless data synchronization to your external database. It emphasizes secure practices like Svix signature verification and idempotency protection.

Automate Cloudinary media workflows—folder creation, upload preset configuration, asset lookup, transformation generation, usage monitoring, and webhook setup—via natural-language commands routed through the Rube MCP server.

Walks through broken authentication assessments by analyzing login flows, password policies, brute-force/credential-stuffing, and session/token security to document vulnerabilities and mitigation steps for web applications.

Guides analysts through assessing web authentication, credential stuffing, password policies, session tokens, and fixation flows to uncover broken authentication risks before attackers do.

This skill covers the end-to-end development of cross-browser extensions (Chrome, Firefox). Expertise includes mastering Manifest V3, structuring complex architecture (service workers, content scripts), managing local/sync storage, building user interfaces, and implementing monetization models. Ideal for building robust, production-ready tools and navigating store publishing policies.

Run comprehensive web application security assessments through Burp Suite’s proxy, repeater, and scanner features to intercept, modify, and analyze HTTP traffic while spotting vulnerabilities for remediation planning.

Guides intercepting HTTP traffic, modifying requests, using Repeater, defining scope, and running Burp Suite scans for systematic web application security testing.

A comprehensive guide for designing production-grade lead enrichment pipelines in Clay. Covers three integration patterns (Webhook, API), detailed table schema design, advanced data waterfall logic, implementing complex ICP scoring formulas, and setting up robust CRM synchronization flows for go-to-market data operations.

Collects comprehensive diagnostic evidence for troubleshooting CodeRabbit integration issues. This bundle checks the App installation status, validates the `.coderabbit.yaml` configuration, reviews recent PR history, and verifies GitHub webhook deliveries. Essential for preparing support tickets and diagnosing complex SaaS integration failures.

This comprehensive guide details how to implement robust webhook endpoints for CodeRabbit, an AI-powered code review tool. It covers essential security practices, including signature validation (HMAC-SHA256), and provides structured methods for handling various event types (e.g., PR reviews, check run completions, comments). Use this skill when integrating CodeRabbit into CI/CD pipelines to automate notifications, track metrics, and enforce quality gates.

Automates cross-browser compatibility verification by orchestrating BrowserStack, Selenium Grid, or Playwright runs across Chrome, Firefox, Safari, and Edge, capturing screenshots/logs and producing a report when requested via `/browser-test`/`/bt` to confirm web app behavior across devices.