Skill UI

This guide identifies and avoids anti-patterns and common integration mistakes when working with Exa's neural search API. It covers crucial topics such as distinguishing between keyword and neural searches, properly retrieving content, handling date filters, and managing client instances. Use this when reviewing Exa-powered code, onboarding new team members, or auditing existing integrations for robustness and correctness.

A comprehensive checklist guiding the full lifecycle deployment of Exa search integrations to a production environment. It covers critical stages including pre-deployment security audits, code quality verification, performance baselines, monitoring setup, and emergency rollback procedures. Use this guide when preparing for a major launch or verifying production readiness.

This comprehensive guide details essential security practices for integrating the Exa API. It covers key areas such as secure API key management using environment variables, implementing content moderation to filter unsafe results, restricting results via domain allow/block lists, and sanitizing user queries to prevent injection attacks. Use this when hardening or auditing an Exa-powered application.

This skill provides structured guidance and patterns for performing comprehensive web fuzzing using the powerful command-line tool, ffuf. Web fuzzing is an essential security testing technique used by penetration testers to discover hidden directories, unlinked endpoints, or sensitive files on a web server by systematically brute-forcing potential paths and parameters. Use this skill when you need to audit the security posture of a web application or map out unknown parts of a website.

Performs a structured, multi-phase audit on local branch changes (diffs) to identify security vulnerabilities, bugs, and code quality issues. It systematically checks for common risks like Injection (SQL, XSS), Broken Authentication, IDOR, CSRF, and business logic flaws, providing detailed severity, evidence, and suggested fixes. Ideal for pre-merge code reviews and security audits.

Scans Android APKs for Firebase misconfigurations, testing databases, storage, authentication, and cloud functions to surface vulnerabilities during mobile security audits.

A comprehensive guide to optimizing Fireflies.ai subscription costs. Learn how to reduce expenses by auditing user utilization, configuring selective recording policies, managing storage retention, and accurately right-sizing your plan (Pro, Business, Enterprise). Ideal for teams reviewing billing or implementing cost-saving measures.

This skill provides a structured methodology for reviewing code commits intended to fix security vulnerabilities or address audit findings. It ensures that the original root cause is properly resolved, verifies the fix hasn't introduced new bugs or vulnerabilities (regressions), and validates the overall completeness of the remediation effort. Ideal for security-critical code reviews.

This skill acts as a comprehensive security scanner specializing in detecting Cross-Site Scripting (XSS) vulnerabilities in client-side code. It performs static analysis across React, Vue, Angular, and vanilla JavaScript, specifically identifying unsafe practices like direct HTML manipulation (innerHTML), raw rendering (v-html), and insecure URL handling. Use it when auditing frontend code for security flaws and needing best practices for secure coding.

This skill provides a robust framework for implementing Role-Based Access Control (RBAC) when integrating with Gamma API in enterprise or multi-tenant environments. Since Gamma's API key is workspace-level, this solution enforces granular, per-user permissions (Guest, Viewer, Editor, Admin) at the application layer. Key components include authorization middleware, multi-tenant isolation logic, usage quota management, and detailed audit logging, ensuring system security and compliance in large-scale deployments.

This expert tool automates compliance checks for EU GDPR and German DSGVO. It scans codebases for privacy risks (PII, special data), generates formal Data Protection Impact Assessments (DPIA), and manages the entire lifecycle of Data Subject Access Requests (DSARs), ensuring adherence to strict legal deadlines. Ideal for privacy audits and compliance planning.

Automates compliance and security audit reporting for standards such as PCI DSS, HIPAA, SOC 2, and ISO 27001 by using the compliance-report-generator plugin to collect details, format documentation, and streamline regulatory proof.