Skill UI

A comprehensive pattern for configuring API clients across multiple operational environments (development, staging, production). This skill uses TypeScript schemas and factory patterns to ensure environment isolation, manage distinct credentials, enforce rate limiting, and implement feature gating. It is essential for building robust, scalable SaaS applications that interact with external services like Apollo.io.

This skill provides a comprehensive checklist for performing rigorous code security reviews. It covers critical areas such as secrets management, input validation, preventing SQL injection, secure authentication (JWT, RLS), and mitigating XSS/CSRF vulnerabilities. Essential for developers building features that handle sensitive data or user input.

A comprehensive guide for navigating Clay's plan changes, pricing overhauls (specifically the 2026 model), and feature upgrades. This skill helps users understand credit restructuring from legacy plans to new Data Credits and Actions, audit current usage, and adapt their integration code to ensure uninterrupted workflow operation after a migration.

A comprehensive toolkit for navigating, optimizing, and managing large monorepos built with JavaScript/TypeScript. It supports industry-leading tools like Turborepo, Nx, pnpm, and Lerna. Key features include cross-package impact analysis, selective builds, remote caching, dependency graph visualization, and structured migrations, ensuring fast, reliable CI/CD pipelines for complex codebases.

This tool systematically audits a project's dependencies to identify potential supply chain security risks. It evaluates critical factors such as maintenance status, contributor count, popularity, and the presence of high-risk features. It is ideal for pre-security audits, assessing the overall attack surface, and mitigating risks before deployment.

This guide details methods for detecting and mitigating OAuth token theft and replay attacks in cloud environments, specifically targeting Microsoft Entra ID (Azure AD). It covers protection against access token theft, Primary Refresh Token (PRT) abuse, and pass-the-cookie attacks. Users can leverage Conditional Access and Token Protection features to cryptographically bind tokens to devices, significantly enhancing cloud identity security and preventing session hijacking.

This workflow utilizes the SerpApi to perform advanced, multi-engine searches across platforms including YouTube, Bing, Google News, Google Shopping, and Google Maps. It is essential for data scraping, SEO research, and building comprehensive search features that require aggregating results from diverse sources beyond standard Google search. Use it to collect videos metadata, product pricing, local business details, and news articles efficiently.

This skill provides a generic entry point for delegating self-contained, complex tasks to various LLM-powered sub-agents (Codex, Claude Code, Pi). It is designed to be used in meta-skill DAG steps for tasks like feature creation, PR reviews, code refactoring, or document generation, providing full tool surface access. It favors non-interactive CLI modes for reliable background execution.

A comprehensive multi-step pipeline tool that executes a fully validated development plan. It handles worktree isolation, TDD scaffolding, parallel task execution across architectural layers, quality gating (linting, testing, smoke tests), documentation reconciliation, PR creation, and final merge, ensuring the feature is fully documented and integrated.

This methodology guides the development of new features, product slices, or integrations while mitigating the risk of overbuilding. It mandates an architecture-first approach, requiring the definition of clear acceptance criteria and explicit non-goals. The process focuses on delivering a coherent end-to-end path across responsible system layers, omitting unnecessary configuration, polish, or complexity, and halting immediately upon successful acceptance testing.

A comprehensive guide for implementing, gating, and managing feature flags within the Webiny system. Learn how to integrate simple boolean flags or complex nested groups, and apply checks at the API, admin UI, and configuration levels, ensuring robust feature rollout and kill switches.

This skill allows delegating self-contained coding tasks to assistants like Codex or Claude Code via non-interactive background processes. It supports feature development, code review, and refactoring. Use OpenSquilla's exec_command and process tools to manage sessions, poll output, and send inputs without blocking the main workflow. Ideal for tasks requiring substantial file exploration.