Skill UI

Provides WCAG 2.1 based accessibility audit guidance for web interfaces, covering perceivable, operable, understandable, and robust principles along with code snippets for alt text, contrast, keyboard, focus, and media alternatives.

This expert conducts comprehensive audits to ensure digital products comply with WCAG standards. It specializes in identifying accessibility barriers, testing user experiences for users with disabilities, and providing step-by-step remediation guidance. Use it for auditing web or mobile platforms, establishing compliance, and improving overall inclusivity.

A comprehensive guide for developers on building secure and robust APIs across REST, GraphQL, and WebSocket protocols. It covers essential security patterns including robust authentication (JWT, OAuth 2.0), granular authorization (RBAC), input validation to prevent injection attacks (SQLi, XSS), rate limiting, and best practices for data encryption and secure headers. Essential for developers preparing for security audits.

Provides comprehensive guidelines for modern web development, covering critical areas like security best practices (e.g., CSP, HTTPS enforcement, input sanitization), browser compatibility (viewport, encoding), and avoiding deprecated APIs. Use this skill when aiming to audit, modernize, or improve the overall quality and robustness of web code.

This skill provides comprehensive methods for managing user data and ensuring compliance with global privacy regulations like GDPR and CCPA. It covers essential features such as data export, implementing the "right to be forgotten" (user deletion), managing user consent via metadata, and maintaining detailed audit logs. Use this for building robust, legally compliant user data management systems in modern web applications.

Implement comprehensive monitoring, structured logging, and performance tracking for Clerk authentication flows. This solution covers logging sign-in/out events, tracking middleware performance, handling webhook events, and integrating detailed error tracking with Sentry, ensuring robust debugging and auditing capabilities in production environments.

This comprehensive guide outlines essential, production-grade security best practices for implementing Clerk authentication. It covers securing environment variables, hardening middleware with crucial security headers (like CSP, X-Frame-Options), protecting API routes with granular authorization checks, and verifying webhooks using signature validation (svix). Use this when deploying or auditing an application to ensure maximum security posture.

This guide details how to implement and handle Documenso webhooks for real-time document lifecycle notifications. Learn to set up secure webhook endpoints to receive critical events—such as document creation, signing completion, rejection, or opening. Use this when you need to trigger automated downstream workflows (e.g., updating CRMs, sending alerts, or logging audit trails) based on any status change in a document signing process.

This skill provides structured guidance and patterns for performing comprehensive web fuzzing using the powerful command-line tool, ffuf. Web fuzzing is an essential security testing technique used by penetration testers to discover hidden directories, unlinked endpoints, or sensitive files on a web server by systematically brute-forcing potential paths and parameters. Use this skill when you need to audit the security posture of a web application or map out unknown parts of a website.

This guide provides essential security protocols and coding best practices for integrating with OpenEvidence, a platform processing Protected Health Information (PHI). It covers mandatory topics such as HIPAA compliance, API key management, webhook signature verification, input validation, and data redaction, ensuring all interactions are secure and audit-compliant.

This guide provides comprehensive documentation and code examples for integrating OpenEvidence webhooks. Learn how to subscribe to real-time events (e.g., query completion, evidence updates, new citations) to keep clinical decision support systems fresh. Use these webhooks to trigger downstream audit workflows and ensure immediate data synchronization.

This comprehensive tool validates web applications against WCAG 2.1/2.2 accessibility standards. It combines automated scanning using industry-leading tools (like axe-core, Lighthouse) with crucial manual checks for keyboard navigation, ARIA implementation, and color contrast. It is essential for QA teams and developers who must ensure high usability and accessibility for all users, including those relying on screen readers.