Skill UI

Provides expert AWS architecture, security, and implementation guidance backed by MCP tooling, helping teams choose services, migrate workloads, and troubleshoot production issues.

This skill automates the validation of AWS environments against critical industry compliance benchmarks. It performs detailed checks for CIS AWS Foundations, PCI-DSS, HIPAA, and SOC 2 standards, covering key areas like Identity and Access Management (IAM), logging, data protection, and network security. Essential for preparing for regulatory audits and maintaining continuous secure operations.

Automate the rotation of sensitive credentials, including RDS database passwords, API keys, and OAuth tokens, using AWS Secrets Manager and Lambda. This skill ensures secure credential lifecycle management, helping maintain system security and compliance by automatically updating credentials for various AWS and third-party services.

A comprehensive SDK guide for managing Azure MySQL Flexible Server deployments using C# and the .NET framework. This skill provides workflows for automated resource management, including server creation, database provisioning, configuring firewall rules, tuning server parameters, and integrating Entra ID (Azure AD) for robust security and operational control.

This robust SDK is the official client library for .NET applications to interact with Azure Key Vault and Managed HSM. It provides comprehensive functionality for managing the full lifecycle of cryptographic keys, including creation (RSA, EC, Symmetric), version control, property updates, secure deletion, and backup/restore. It supports core cryptographic operations such as encryption, decryption, digital signing, verification, and key wrapping.

Utilize the Azure Key Vault Keys Java SDK to perform comprehensive key lifecycle management and cryptographic operations. This guide covers creating, retrieving, updating, and deleting various key types (RSA, EC, Symmetric) in both standard Azure Key Vault and Managed HSM. It demonstrates key operations such as encryption, decryption, signing, and verifying data using Java.

A comprehensive guide for building production-grade Web3 applications, smart contracts, and decentralized systems. Covers expertise in DeFi protocols, NFT platforms, DAOs, cross-chain interoperability, and advanced smart contract security patterns (Solidity, Rust). Ideal for developers building complex, resilient decentralized finance (DeFi) and enterprise-grade blockchain solutions.

This skill scans session management code to spot insecure IDs, missing expirations, and fixation risks, then summarizes findings and remediation steps for developers needing a session-security audit.

A comprehensive guide for engineering teams to manage critical incidents related to Clerk authentication and SaaS platform outages. It covers full incident lifecycle procedures, including initial triage, emergency auth bypass implementation, key rotation, session recovery scripts, and post-incident root cause analysis. Use this when facing production authentication failures or security breaches.

This comprehensive guide outlines essential, production-grade security best practices for implementing Clerk authentication. It covers securing environment variables, hardening middleware with crucial security headers (like CSP, X-Frame-Options), protecting API routes with granular authorization checks, and verifying webhooks using signature validation (svix). Use this when deploying or auditing an application to ensure maximum security posture.

Run comprehensive web application security assessments through Burp Suite’s proxy, repeater, and scanner features to intercept, modify, and analyze HTTP traffic while spotting vulnerabilities for remediation planning.

An expert AI specialist that integrates advanced static analysis (e.g., CodeQL, SonarQube) with modern DevOps practices. It performs multi-layered code reviews, checking for security vulnerabilities, performance bottlenecks, architectural flaws, and adherence to best practices across various languages. Ideal for CI/CD pipelines and pull request validation.