Skill UI

Guides intercepting HTTP traffic, modifying requests, using Repeater, defining scope, and running Burp Suite scans for systematic web application security testing.

A comprehensive guide detailing security best practices for Deepgram API integration. It covers critical topics such as implementing scoped API keys, key rotation strategies, enabling built-in PII redaction for sensitive data, generating temporary client-side keys, and validating audio URLs to prevent SSRF attacks. Use this when building robust, production-grade applications requiring high data security and compliance.

Expert in modern CI/CD pipelines, GitOps workflows, and platform engineering. Specializes in designing and implementing secure, zero-downtime deployment strategies for enterprise-scale applications. Proficient with Kubernetes, ArgoCD, Terraform, and advanced security compliance practices.

A comprehensive expert for configuration management, specializing in validating, testing, and ensuring the correctness of application settings. It creates robust validation schemas (e.g., JSON Schema) and performs critical checks, including identifying potential security secrets (API keys, passwords), ensuring data consistency across different environments (development, staging, production), and enforcing type safety for reliable deployments.

This expert provides advanced, practical knowledge across the entire lifecycle of containerized applications. Core expertise includes multi-stage Dockerfile optimization, container security hardening (non-root users, minimal attack surface), and advanced orchestration using patterns like Docker Compose. Ideal for ensuring robust, secure, and production-ready deployments.

This guide provides comprehensive best practices for securing Evernote API integrations. It covers essential topics like secure credential management using environment variables or vaults, implementing CSRF-protected OAuth flows, encrypting access tokens at rest using AES-256-GCM, rigorous input validation, and ensuring secure logging practices by redacting sensitive data. Use this when hardening your application against data breaches.

This comprehensive guide details essential security practices for integrating the Exa API. It covers key areas such as secure API key management using environment variables, implementing content moderation to filter unsafe results, restricting results via domain allow/block lists, and sanitizing user queries to prevent injection attacks. Use this when hardening or auditing an Exa-powered application.

This skill provides structured guidance and patterns for performing comprehensive web fuzzing using the powerful command-line tool, ffuf. Web fuzzing is an essential security testing technique used by penetration testers to discover hidden directories, unlinked endpoints, or sensitive files on a web server by systematically brute-forcing potential paths and parameters. Use this skill when you need to audit the security posture of a web application or map out unknown parts of a website.

Scans infrastructure-as-code, application, and system configurations via the security-misconfiguration-finder plugin to expose vulnerabilities and compliance gaps, enabling proactive remediation before deployment.

Manages Firebase/Firestore CRUD, queries, batch jobs, and security for applications while extending to A2A agent messaging, MCP server integration, and Cloud Run coordination for advanced workflows.

An expert skill dedicated to building secure, robust frontend applications. It specializes in preventing client-side vulnerabilities such as XSS and clickjacking. Core capabilities include safe DOM manipulation, implementing Content Security Policy (CSP), advanced input sanitization (allowlisting), and securing complex interactions like secure redirects and session management.

This skill guides the development of robust, security-focused full-stack web applications. It ensures layered security coverage across the entire application stack, from database queries (parameterized queries) to API endpoints (authentication/authorization) and frontend components (input validation, output encoding). Use this when building end-to-end features, microservices, or REST APIs that require simultaneous attention to Frontend, Backend, and Security best practices.