Skill UI

Evaluates infrastructure setups against SOC2, HIPAA, and PCI-DSS, highlights violations, and recommends fixes when users request compliance checks or audit reports.

Automates OWASP Top 10 (2021) security assessments via the owasp-compliance-checker plugin, scanning codebases for vulnerabilities, reporting compliance gaps, and suggesting remediation advice for developers or auditors.

This skill scans session management code to spot insecure IDs, missing expirations, and fixation risks, then summarizes findings and remediation steps for developers needing a session-security audit.

Audits and improves CLAUDE.md files across repositories by discovering every relevant file, scoring its sections, reporting quality issues, and preparing targeted additions before any write actions.

A comprehensive guide to setting up robust Role-Based Access Control (RBAC) and governance within enterprise data workspaces like Clay. Learn how to define specific user roles (Admin, Member, Viewer), allocate team credit budgets, isolate API keys, and conduct quarterly access audits to maintain data security and operational efficiency for large teams.

This comprehensive guide identifies and explains common anti-patterns, gotchas, and integration mistakes when using Clay's data enrichment platform. It details the root causes of credit waste, workflow failures, and data loss, providing actionable fixes for auditing configurations, onboarding new team members, or optimizing existing pipelines.

This comprehensive guide details how to migrate from multiple standalone data enrichment providers (like ZoomInfo, Apollo, Clearbit) or complex custom scripts into a unified Clay pipeline. It covers auditing current data stacks, mapping disparate fields, running parallel validation tests, and configuring Clay to consolidate data sources, significantly reducing complexity and operational costs.

A comprehensive guide for navigating Clay's plan changes, pricing overhauls (specifically the 2026 model), and feature upgrades. This skill helps users understand credit restructuring from legacy plans to new Data Credits and Actions, audit current usage, and adapt their integration code to ensure uninterrupted workflow operation after a migration.

This skill provides comprehensive methods for managing user data and ensuring compliance with global privacy regulations like GDPR and CCPA. It covers essential features such as data export, implementing the "right to be forgotten" (user deletion), managing user consent via metadata, and maintaining detailed audit logs. Use this for building robust, legally compliant user data management systems in modern web applications.

Implement comprehensive monitoring, structured logging, and performance tracking for Clerk authentication flows. This solution covers logging sign-in/out events, tracking middleware performance, handling webhook events, and integrating detailed error tracking with Sentry, ensuring robust debugging and auditing capabilities in production environments.

This comprehensive guide outlines essential, production-grade security best practices for implementing Clerk authentication. It covers securing environment variables, hardening middleware with crucial security headers (like CSP, X-Frame-Options), protecting API routes with granular authorization checks, and verifying webhooks using signature validation (svix). Use this when deploying or auditing an application to ensure maximum security posture.

Automate Clockify time tracking via Claude Code, letting you log entries, query history, manage workspaces, and handle running timers through natural language commands for streamlined billing, reporting, and team audits.