Skill UI

A comprehensive checklist for ensuring an application integrated with Clerk is fully production-ready. It covers essential steps across environment configuration, security hardening (e.g., CORS, rate limiting), monitoring setup, graceful error handling, and performance optimization necessary before launching to a live audience.

Automates cors policy validator tasks in the Security Fundamentals domain, offering best-practice guidance, prompt validation, and production-ready configuration snippets whenever you ask about cors policy patterns or hardening.

Explains how to create route.ts endpoints in the Next.js App Router, covering HTTP methods, request/response handling, streaming, cookies, redirects, CORS, and caching so you can build REST APIs.

Provides authentication, authorization, encryption, secrets, and hardening patterns for designing secure auth flows, managing tokens, configuring CORS, and implementing best practices around API keys, JWT, OAuth, and rate limiting.

Analyzes CORS configurations via the cors-policy-validator plugin to spot misconfigurations, validate headers or files, and report vulnerabilities so developers can secure web apps and APIs from unsafe cross-origin access.

A comprehensive set of architectural patterns for building robust and maintainable HTTP servers using Kotlin Coroutines and the Ktor framework. It covers essential topics including REST routing DSL, plugin configuration (Authentication, CORS, StatusPages), Dependency Injection (Koin), serialization, WebSockets, and integration testing using testApplication.

This skill provides a comprehensive guide and methodology for identifying and exploiting Cross-Origin Resource Sharing (CORS) misconfigurations in web applications. It covers testing origin validation bypasses, analyzing preflight requests, and simulating data exfiltration during authorized penetration tests, crucial for assessing API security.

This guide serves as the core entry point for comprehensive security testing of identity and access control mechanisms. It is designed to help testers systematically identify vulnerabilities across login flows, session management, object authorization (IDOR), and modern protocols like JWT, OAuth, CORS, and SAML. Use this when planning security audits for any web application with user accounts.

This comprehensive playbook guides the testing of Cross-Origin Resource Sharing (CORS) misconfigurations. It focuses on detecting critical vulnerabilities such as reflected origins, wildcard trust misuse, credentialed cross-origin reads, and bypasses in origin allowlists. Use this when analyzing browser-based access and trust boundaries for authenticated APIs.

A comprehensive set of architectural patterns for building robust and maintainable HTTP servers using Kotlin Coroutines and the Ktor framework. It covers essential topics including REST routing DSL, plugin configuration (Authentication, CORS, StatusPages), Dependency Injection (Koin), serialization, WebSockets, and integration testing using testApplication.

This guide covers essential security best practices for Spring Boot applications. Learn how to implement robust authentication (JWT, OAuth2), authorization using method security, secure input validation, prevent SQL injection, manage secrets, and configure vital security headers (CORS, CSRF). Essential for building production-ready, secure Java backend services.