Skill UI

A comprehensive guide for developers working with Supabase. Covers best practices for database interaction, robust authorization using Row Level Security (RLS), secure authentication (Auth), and integrating various Supabase products (Storage, Realtime, Edge Functions). Essential for preventing common security vulnerabilities like BOLA/IDOR and ensuring data integrity across your application stack.

This skill performs an adversarial audit of web application authentication flows. It systematically probes for critical security vulnerabilities such as missing CSRF protection, insecure session cookies (lacking Secure/HttpOnly flags), risky cross-origin redirects, and OAuth misconfigurations. It generates a structured report detailing findings and severity levels, making it ideal for pre-deployment security audits and regression testing.

A comprehensive guide covering essential security best practices for Django applications. It details how to implement robust authentication, granular authorization (RBAC), and crucial security settings like CSRF/XSS protection, HSTS, and secure environment configuration to prevent common vulnerabilities in production deployments.

A comprehensive, multi-phase checklist for ensuring the quality, security, and deployment readiness of Django applications. It covers linting (ruff, mypy), unit testing (pytest), database migrations, security audits (bandit, pip-audit), and performance checks, making it an essential quality gate for CI/CD pipelines before merging or deploying to production.

A comprehensive guide to building HIPAA, GDPR, and other global compliance systems for healthcare applications. This pattern outlines best practices for protecting Protected Health Information (PHI) and Personally Identifiable Information (PII) by implementing robust access controls, Row-Level Security (RLS), and mandatory audit trails. Essential for any feature handling patient or clinical data.

A comprehensive guide detailing best practices for securing Laravel applications. Covers critical areas including robust authentication and authorization (Policies, Sanctum), input validation (Form Requests), mitigating common vulnerabilities like XSS, CSRF, and SQL injection, and implementing secure deployment configurations.

This comprehensive guide covers essential security patterns for Perl development, addressing common vulnerabilities like SQL Injection, XSS, Path Traversal, and Shell Injection. It details best practices including using Perl's Taint Mode, implementing strict allow-list validation, performing safe file operations, and executing external commands securely to ensure robust and resilient applications.

This comprehensive guide covers security best practices for building robust Quarkus applications. It details how to implement secure authentication (JWT, OIDC), role-based authorization (RBAC), robust input validation (Bean Validation), and advanced protection against vulnerabilities like SQL injection and CSRF. Essential for securing resource access and managing application secrets.

This comprehensive guide outlines a multi-stage verification pipeline for Quarkus applications. It covers build artifacts, static analysis (Checkstyle, SonarQube, PMD), comprehensive testing (Unit, Integration, API), security scanning (OWASP, dependency checks), native compilation, and performance testing (K6). Use this before PRs or deployments to ensure code quality and stability.

This guide covers essential security best practices for Spring Boot applications. Learn how to implement robust authentication (JWT, OAuth2), authorization using method security, secure input validation, prevent SQL injection, manage secrets, and configure vital security headers (CORS, CSRF). Essential for building production-ready, secure Java backend services.

A comprehensive security auditing tool designed to analyze codebases for vulnerabilities. It provides a structured workflow to scan entire repositories, review specific changes (like PR diffs or single commits), and suggest verified patch files. Findings are challenged by independent agents, ensuring that suggested fixes are targeted and require manual review before application.

A comprehensive guide for authors targeting the Annual Computer Security Applications Conference (ACSAC). It helps assess the fit, scope, and required evidence for applied security papers, ensuring the manuscript is properly reframed from academic theory to deployable, operational defenses. Use this tool for venue selection and submission strategy.