Skill UI

An expert developer specializing in secure backend coding practices, vulnerability mitigation, and robust API design. Proficient in preventing common attacks such as SQL injection, XSS, and CSRF. Covers comprehensive areas including input validation, authentication mechanisms (OAuth 2.0, MFA), database security, and implementing necessary security headers (CSP, HSTS) for building secure-by-design applications. Ideal for implementing security fixes or building new, hardened backend services.

This skill helps transform code reviews from simple gatekeeping into a powerful knowledge-sharing mechanism. It guides users through systematic analysis of code changes, focusing on correctness, security, performance, and maintainability. Use it when reviewing pull requests, establishing best practices, or mentoring developers to ensure high-quality, robust codebase development.

Learn how to integrate CodeRabbit as a mandatory Continuous Integration (CI) gate within your GitHub repository. This comprehensive guide demonstrates setting up branch protection rules, creating GitHub Actions workflows, and enforcing CodeRabbit's reviews to ensure high code quality before merging. Includes advanced setup for PR size checks and notification mechanisms.

This skill provides a structured, git-aware mechanism to revert changes associated with specific logical work units (tracks, phases, or tasks). It performs comprehensive pre-flight checks, identifies relevant commits through structured logging, displays a detailed execution plan, and executes the revert safely in reverse chronological order. Ideal for undoing complex, multi-step development changes while maintaining project integrity.

Implements robust mechanisms for handling API rate limits (e.g., 429 errors) when interacting with services like Customer.io. It utilizes the Token Bucket algorithm for precise throttling and combines it with exponential backoff, jitter, and queue processing (p-queue) to ensure high reliability and prevent API overloads.

This guide implements Deepgram's callback and webhook mechanism for handling asynchronous audio transcription. It provides a complete workflow, including submitting audio for background processing, setting up a secure webhook endpoint (with HMAC signature verification), and managing job status using Redis. Essential for integrating robust, delayed voice processing results into a production backend system.

This repository provides production-ready, structured templates for building core Decentralized Finance (DeFi) protocols using Solidity. Templates cover essential components such as staking reward systems, Automated Market Makers (AMMs), governance logic, lending/borrowing mechanisms, and flash loans. It is essential for developers aiming to build robust and scalable smart contract applications on blockchain platforms.

A comprehensive guide to diagnosing and resolving common errors encountered when using the Evernote API. It covers three main exception types—User, System, and Not Found—and provides practical solutions, including ENML validation, rate limit retry mechanisms, and safe resource retrieval patterns, ensuring robust application integration.

This guide details the implementation of real-time synchronization for Evernote notes. It utilizes Evernote webhooks to detect changes (creation, updates, deletions) and pairs this with the Sync API to reliably fetch the actual data chunks. The process covers setting up webhook endpoints, managing sync state (USN), ensuring idempotency, and establishing a robust polling fallback mechanism for continuous data synchronization.

Provides expert guidance on secure and performant file upload mechanisms for cloud environments. Covers best practices for using services like AWS S3 and Cloudflare R2, including implementing presigned URLs, handling large files via streaming, and optimizing images. Crucially emphasizes critical security measures such as validating file types using magic bytes, enforcing size limits, and preventing path traversal attacks.

This workflow provides the primary mechanism for converting complex, live websites into clean, LLM-ready markdown content. It supports single-page scraping using `scrapeUrl`, deep multi-page site crawling with `crawlUrl`, and scalable async crawling for large datasets. Ideal for building robust content ingestion pipelines and reliably extracting structured information from the web.

A comprehensive guide and implementation for managing rate limits, exponential backoff, and request queuing when interacting with the Fireflies.ai GraphQL API. This skill ensures robust API calling by detecting 429 errors, handling per-plan quotas, and implementing reliable retry mechanisms.