Skill UI

Automatically assists with generating Content Security Policies, offering step-by-step guidance, production-ready code, and validation against common standards whenever you mention or ask about CSP generation.

A comprehensive guardrail system for external search APIs (like Exa). It enforces content safety policies, manages domain access via allow/blocklists, sanitizes queries to prevent misuse, implements result freshness checks, and enforces per-user usage quotas. Essential for building reliable, secure, and cost-controlled integrations.

This skill provides robust, automated guardrails for web scraping pipelines using Firecrawl. It enforces critical policies to ensure compliance and stability, including domain blocklists (preventing scraping prohibited sites), managing API credit budgets, filtering low-quality content (e.g., error pages, thin content), and implementing granular per-domain rate limiting. Use this when building highly reliable, legal, and cost-efficient scraping solutions.

An expert skill dedicated to building secure, robust frontend applications. It specializes in preventing client-side vulnerabilities such as XSS and clickjacking. Core capabilities include safe DOM manipulation, implementing Content Security Policy (CSP), advanced input sanitization (allowlisting), and securing complex interactions like secure redirects and session management.

This guide provides a comprehensive reference for diagnosing and resolving common errors encountered when interacting with the Kling AI API. It covers various HTTP status codes (e.g., 400, 401, 429), task-level failures (e.g., content policy violations, low image quality), proper JWT token management, and implementing rate limit handling with exponential backoff. Use this resource when troubleshooting failed video generation or API integration issues.

A comprehensive framework for assessing the security, privacy, and compliance posture of Kling AI integrations. It covers crucial areas such as data residency, credential management, content policy adherence, and GDPR compliance (e.g., right to erasure). Use this guide when preparing for security audits or implementing robust data handling protocols for AI-generated content.

Implements robust content policy compliance for generative AI prompts and outputs, such as those from Kling AI. This skill provides pre-submission filtering functionality, preventing the generation of restricted content (e.g., violence, explicit material, hate speech) and saving API credits. It includes Python code examples for prompt screening and handling server-side rejection messages.

This guide implements comprehensive guardrails for Perplexity Sonar API. It covers crucial aspects like query content moderation, PII sanitization, enforcing user usage quotas, selecting appropriate models based on user tiers, and scoring citation reliability to ensure safe, ethical, and cost-effective AI usage.

A comprehensive guide for deep PostgreSQL diagnostics, designed for advanced troubleshooting when standard methods fail. Covers using pg_stat_statements for identifying slow queries, analyzing lock contention with pg_locks, detecting connection leaks, debugging RLS policy conflicts, and profiling Edge Function cold starts. Essential for performance regression investigation and escalating issues to support.

A comprehensive guide for web security professionals detailing advanced techniques to bypass Content-Security-Policy (CSP) headers. It covers exploiting weaknesses such as unsafe-inline/unsafe-eval, JSONP endpoints, base-uri, and nonce/hash gaps. Used during penetration testing or bug bounty hunting to achieve Cross-Site Scripting (XSS) or data exfiltration even when CSP is implemented.

This guide provides a comprehensive methodology for auditing essential HTTP security headers, including CSP, HSTS, X-Frame-Options, and Referrer-Policy. It helps identify missing or improperly configured browser-level protections, crucial for mitigating vulnerabilities like XSS, clickjacking, and mixed content issues, ensuring compliance with standards like PCI DSS and SOC 2.

A detailed methodology for identifying Cross-Site Scripting (XSS) vulnerabilities across web applications. It guides systematic testing for Reflected, Stored, and DOM-based XSS, covering payload bypass, output encoding evaluation, and assessing Content Security Policy (CSP) protection. Essential for OWASP WSTG testing and client-side security audits.