Skill UI

This comprehensive guide outlines essential, production-grade security best practices for implementing Clerk authentication. It covers securing environment variables, hardening middleware with crucial security headers (like CSP, X-Frame-Options), protecting API routes with granular authorization checks, and verifying webhooks using signature validation (svix). Use this when deploying or auditing an application to ensure maximum security posture.

Provides Django security best practices covering production settings, authentication, authorization, CSRF and SQL injection protection, plus deployment hardening to keep live apps safe.

Provides expert .NET/C# backend work for ASP.NET Core 8+ APIs, covering EF Core data access, authentication/authorization, background services, performance tuning, and production-ready patterns for enterprise services.

Implement robust Role-Based Access Control (RBAC) specifically for Evernote integrations. This guide covers multi-tenant architectures, handling Evernote Business accounts, defining granular permissions (READ, WRITE, FULL), and creating authorization middleware. Essential for building secure, enterprise-grade SaaS applications that manage shared corporate data.

This skill guides the development of robust, security-focused full-stack web applications. It ensures layered security coverage across the entire application stack, from database queries (parameterized queries) to API endpoints (authentication/authorization) and frontend components (input validation, output encoding). Use this when building end-to-end features, microservices, or REST APIs that require simultaneous attention to Frontend, Backend, and Security best practices.

This skill provides a robust framework for implementing Role-Based Access Control (RBAC) when integrating with Gamma API in enterprise or multi-tenant environments. Since Gamma's API key is workspace-level, this solution enforces granular, per-user permissions (Guest, Viewer, Editor, Admin) at the application layer. Key components include authorization middleware, multi-tenant isolation logic, usage quota management, and detailed audit logging, ensuring system security and compliance in large-scale deployments.

This guide details how to implement robust, multi-layered Role-Based Access Control (RBAC) for managing LLM API calls to Groq in an enterprise setting. It covers best practices for API key scoping, application-level authorization (model selection, token limits), rate limiting, and detailed spending control mechanisms, ensuring secure and cost-effective usage across multiple teams.

This guide provides comprehensive steps and code examples for migrating Instantly.ai integrations from the deprecated API v1 to the modern REST API v2. It details critical changes, including updating authentication from query-string API keys to Bearer token authorization, standardizing endpoints, and restructuring complex request bodies. Use this skill to ensure your applications remain functional after the v1 deprecation.

A specialized security auditor for Laravel applications. It analyzes code, APIs, and configurations against OWASP standards to detect vulnerabilities such as XSS, IDOR, SQL injection, and misconfigurations. Ideal for reviewing backend logic to ensure robust data protection and authorization.

Comprehensive patterns and best practices for deploying and managing microservices using the Linkerd service mesh on Kubernetes. Covers automatic mTLS, sophisticated traffic splitting for canary deployments, setting Service Profiles for enhanced resilience (retries/timeouts), and defining robust authorization policies.

Provides a comprehensive checklist for planning, scoping, executing, and wrapping up penetration tests, covering objectives, authorization, environment prep, scans, tester selection, methodologies, reporting, and remediation tracking.

Automates vulnerability scans for applications and APIs via the security-test-scanner plugin, covering OWASP Top 10, SQL injection, XSS, CSRF, authentication, and authorization weaknesses while generating detailed remediation reports.