Skill UI

Automate the rotation of sensitive credentials, including RDS database passwords, API keys, and OAuth tokens, using AWS Secrets Manager and Lambda. This skill ensures secure credential lifecycle management, helping maintain system security and compliance by automatically updating credentials for various AWS and third-party services.

This SDK provides comprehensive Java support for managing secrets within Azure Key Vault. It enables developers to securely store, retrieve, update, list, delete, and recover sensitive configuration data, such as API keys, database passwords, and connection strings. It is essential for building secure, production-ready applications that comply with best security practices.

An expert developer specializing in secure backend coding practices, vulnerability mitigation, and robust API design. Proficient in preventing common attacks such as SQL injection, XSS, and CSRF. Covers comprehensive areas including input validation, authentication mechanisms (OAuth 2.0, MFA), database security, and implementing necessary security headers (CSP, HSTS) for building secure-by-design applications. Ideal for implementing security fixes or building new, hardened backend services.

Automates CodeQL database builds, suite selection, and taint-aware scans to surface security and quality issues across supported languages, handling output directories, SARIF results, and extensions in one workflow.

This skill provides a comprehensive guide to configuring CodeRabbit for advanced, security-focused code reviews. It teaches how to implement rules for detecting hardcoded secrets, common vulnerabilities (like SQL injection and XSS), and enforcing secure coding standards across APIs, databases, and infrastructure code. Use this when hardening a codebase's security posture or ensuring compliance with industry standards.

A comprehensive reference guide for structuring development projects within the Cursor IDE. It details best practices for directory layout, defining layered rules (covering global conventions, security constraints, and technology-specific patterns like API routes and database access), and optimizing indexing strategies. This ensures maximum AI effectiveness, improves code maintainability, and streamlines the entire development workflow.

Scans Android APKs for Firebase misconfigurations, testing databases, storage, authentication, and cloud functions to surface vulnerabilities during mobile security audits.

This skill guides the development of robust, security-focused full-stack web applications. It ensures layered security coverage across the entire application stack, from database queries (parameterized queries) to API endpoints (authentication/authorization) and frontend components (input validation, output encoding). Use this when building end-to-end features, microservices, or REST APIs that require simultaneous attention to Frontend, Backend, and Security best practices.

A comprehensive guide maintained by Supabase for optimizing Postgres performance. It provides critical rules and best practices across query performance, schema design, connection management, and security (including RLS). Use this skill when writing, reviewing, or optimizing complex SQL queries, database schemas, or configurations to ensure optimal database health and performance.

Comprehensive guide to managing data securely in Replit applications. This skill covers three core storage systems: PostgreSQL for structured data and complex queries; Replit KV Database for caching and session management; and Object Storage for file uploads and blobs. Learn best practices including parameterized queries, TTL implementation, and secure data access patterns.

Performs OWASP-guided security scans on PostgreSQL and MySQL databases via the database-security-scanner plugin, identifying weak passwords, SQL injection risks, and misconfigurations while generating reports and remediation advice.

Execute systematic SQL injection vulnerability assessments on web applications using reconnaissance, payload tuning, and exploitation workflows to uncover database flaws, capture evidence, and validate remediation recommendations for authorized security testing.