Skill UI

A comprehensive, multi-phase workflow designed for conducting deep security audits across modern web applications and APIs. This bundle guides users through the entire security lifecycle, including reconnaissance, vulnerability scanning (SAST/DAST), specific testing for OWASP Top 10 and injection flaws, specialized API fuzzing, full-scope penetration testing, security hardening, and final risk reporting. Ideal for compliance checks and proactive security enhancement.

Provides comprehensive security review guidance for authentication, input handling, secrets, APIs, and payment-sensitive workflows, with actionable checklists covering secrets, validation, SQL injection, auth, XSS, CSRF, rate limits, and sensitive data handling.

This skill implements a robust, multi-layered security hardening process based on the Defense-in-Depth strategy and DevSecOps principles. It coordinates specialized agents to perform comprehensive security assessments (SAST, DAST, SBOM, Threat Modeling), identify critical vulnerabilities, and execute layered remediation. The process covers application code, backend APIs, frontend components, and mobile platforms, ensuring a resilient security posture across the entire development lifecycle.

A comprehensive toolset for the full backend development lifecycle. This suite enables developers to scaffold API routes from OpenAPI specifications, manage complex database migrations and optimization (PostgreSQL), and perform rigorous load/performance testing. It supports building robust microservices, securing REST APIs, and ensuring system scalability.

Sentence Transformers provides 5000+ pre-trained models that generate sentence, text, and image embeddings for RAG, semantic search, clustering, and multilingual production workloads without relying on external APIs.

This skill guides developers through major Sentry SDK version upgrades (e.g., v7 to v8, Python v1 to v2). It helps detect deprecated APIs, runs automated codemods (like @sentry/migr8), and applies manual fixes for breaking changes, ensuring a smooth transition while maintaining robust error tracking and observability.

Serve production-grade LLM APIs with vLLM, leveraging PagedAttention, continuous batching, quantization, and tensor parallelism to maximize throughput while keeping latency, GPU usage, and scalability under control for OpenAI-compatible deployments.

Automate core SharePoint operations—site discovery, list and folder management, file searches, delta sync, and page retrieval—across SharePoint and OneDrive using REST/Graph APIs for Microsoft 365 org accounts.

A specialized methodology for reviewing APIs, configuration schemas, and interfaces to identify 'footguns'—design choices where the path of least resistance leads to insecurity. This analysis focuses on making secure usage the default, covering topics like dangerous defaults, primitive vs. semantic type safety, and insecure algorithm selection. It is crucial for architects and reviewers to prevent developer misuse at the design level.

A comprehensive developer reference covering the full spectrum of Shopify development, including Liquid templating, OS 2.0 architecture, GraphQL APIs (Admin and Storefront), and modern headless solutions using Hydrogen. This guide assists in building advanced themes, custom apps, implementing serverless business logic via Functions, and optimizing performance for modern e-commerce storefronts.

This guide details setting up a robust CI integration pipeline for Speak language learning platform integrations. It utilizes GitHub Actions with mocked API testing and audio validation to ensure code reliability and functional correctness before deployment. Ideal for developers managing complex language learning products and APIs.

This workflow provides an AI-powered platform for immersive conversation practice. It uses advanced language models (like GPT-4o) and real-time speech APIs to simulate real-life scenarios (e.g., ordering food, navigating). Users receive immediate, detailed feedback on pronunciation (phoneme level), grammar corrections, and vocabulary notes, making it an ideal core module for building language fluency and simulating professional tutoring experiences.