Skill UI

A comprehensive guide detailing the most common and critical mistakes when developing with Supabase. Covers severe security issues (like exposing service role keys or missing RLS), data integrity failures, and performance bottlenecks (connection pooling, N+1 queries). Essential for code review, onboarding new developers, or auditing existing Supabase projects to ensure secure and robust applications.

A comprehensive guardrail system for enforcing organizational governance across Supabase projects. It provides reusable RLS policy templates, strict naming conventions, CI-checked migration processes, cost alert configurations, and security audit scripts. Use this to ensure development consistency, security, and cost control at scale.

This skill provides comprehensive performance optimization and best practices for PostgreSQL, maintained by Supabase. It guides users on optimizing database performance, covering critical areas such as writing efficient SQL queries, designing robust schemas, implementing proper indexing, managing connection pooling, and enforcing Row-Level Security (RLS).

This skill translates complex business requirements and specification documents into a complete, production-ready Postgres schema for Supabase. It covers the full development lifecycle, including entity extraction, defining robust tables with constraints, generating migration SQL files, implementing Row Level Security (RLS) policies, and producing corresponding TypeScript types. It is the foundational step for building any robust SaaS application on Supabase.

A specialized skill designed to ensure robust software quality by covering the entire testing lifecycle. This includes defining test strategies, writing unit, integration, and E2E tests, and implementing advanced testing types like performance (k6), security (OWASP), and functional testing. It guides users through coverage analysis, debugging flaky tests, and generating detailed defect and quality reports.

Meta-skill that analyzes the Trail of Bits Testing Handbook and generates Claude Code skills for security testing tools and techniques, ideal for creating or refreshing handbook-based skills in bulk.

This skill maps identified security threats to appropriate controls and mitigation strategies. It is essential for prioritizing security investments, building comprehensive remediation roadmaps, validating existing control coverage, and performing detailed risk treatment planning. It helps organizations design robust, defense-in-depth security architectures.

This skill outlines security best practices for the TwinMind AI meeting assistant. It covers crucial aspects like on-device audio processing, encrypted cloud backups, and managing microphone permissions. Use it when setting up new TwinMind instances or managing AI operations to ensure data privacy, compliance, and robust security for sensitive meeting data.

Validating Authentication Implementations assesses authentication mechanisms like JWT, OAuth, sessions, and API keys against security standards, then reports vulnerabilities and recommendations for password policy, MFA, token handling, and session security.

This expert skill validates the deployment readiness of Vertex AI Agent Engines. It executes a weighted audit across five critical dimensions: security, monitoring, performance, compliance, and best practices. The output provides a comprehensive 0-100% composite score, a detailed pass/fail report for each check, and a prioritized, actionable remediation plan, ensuring high-quality, production-grade deployments.

This skill provides robust guidelines and patterns for managing environment variables and sensitive credentials securely. It is designed to ensure that secrets, API keys, and other confidential information are never accidentally exposed or logged in Claude sessions, terminal outputs, development logs, or version control commits (like Git). Use this skill when handling sensitive data in development workflows to maintain maximum security.

This comprehensive guide outlines security best practices for utilizing Vast.ai's cloud environment. It covers secure API key management, hardening SSH access to GPU instances, implementing proper data cleanup before instance destruction, and adhering to robust network security protocols. Use this when setting up, auditing, or deploying sensitive AI/ML workloads on shared cloud hardware.