Skill UI

Configure GDPR-compliant data handling, PII scrubbing, and data retention policies within Sentry. This skill provides detailed instructions on implementing client-side `beforeSend` hooks and server-side scrubbing rules to securely redact sensitive data (passwords, emails, IP addresses, CC numbers). Essential for achieving compliance with regulations like GDPR, HIPAA, and meeting SOC 2 audit controls.

Implement comprehensive GDPR and CCPA compliance measures within Supabase. This skill guides developers on setting up Row Level Security (RLS) for tenant isolation, managing PII columns, executing right-to-deletion workflows, auditing sensitive data, and establishing automated data retention policies. Essential for any SaaS application handling regulated user data.

This tool collects a comprehensive, redacted diagnostic bundle from a Supabase project. It systematically tests connectivity, authentication (Auth), Realtime capabilities, Storage buckets, and Row-Level Security (RLS) policies. The resulting archive is designed for sharing with support teams to accelerate troubleshooting of complex issues like connection failures or misconfigurations.

Implements a robust, enterprise-grade Role-Based Access Control (RBAC) system for Supabase. This skill teaches how to store custom roles (e.g., admin, editor, viewer) in JWT claims (`app_metadata`), enforce granular permissions, and scope access at the row level using PostgreSQL RLS policies. It covers organization scoping, role hierarchy management, and API key protection.

A comprehensive guardrail system for enforcing organizational governance across Supabase projects. It provides reusable RLS policy templates, strict naming conventions, CI-checked migration processes, cost alert configurations, and security audit scripts. Use this to ensure development consistency, security, and cost control at scale.

This skill translates complex business requirements and specification documents into a complete, production-ready Postgres schema for Supabase. It covers the full development lifecycle, including entity extraction, defining robust tables with constraints, generating migration SQL files, implementing Row Level Security (RLS) policies, and producing corresponding TypeScript types. It is the foundational step for building any robust SaaS application on Supabase.

This skill provides a comprehensive guide to securing Supabase projects. It covers critical security measures, including proper separation of anonymous and service role keys, enforcing Row Level Security (RLS) on all tables, and hardening the API surface. Use this when setting up a new project, performing security audits, or implementing robust data access control policies.

This comprehensive skill provides advanced architectural patterns for implementing robust API throttling and rate limiting policies. It covers critical concepts like concurrency limiting, priority queuing, circuit breakers, and adaptive throttling that adjust limits based on real-time backend health metrics (p95/p99 latency). Use this when designing resilient, scalable backend services that must protect themselves from overload and maintain stability under high load.

This skill guides the implementation and management of meeting data within the TwinMind platform, ensuring adherence to GDPR compliance. It covers secure transcript storage, memory vault management, data export protocols, and deletion policies. Ideal for developers integrating complex meeting AI operations or managing enterprise-level data governance.

Analyzes CORS configurations via the cors-policy-validator plugin to spot misconfigurations, validate headers or files, and report vulnerabilities so developers can secure web apps and APIs from unsafe cross-origin access.

This skill provides comprehensive configuration for Windsurf deployments, managing data transmission controls, retention policies, and regional compliance settings. It ensures adherence to global privacy standards, such as GDPR, by handling data governance and defining code exclusion patterns.

This guide details how to configure Windsurf for professional enterprise deployment, covering critical security and governance features. Key areas include setting up SSO/SAML authentication, defining role-based permissions (Owner, Admin, Member), establishing organization-wide AI policies and data controls, managing user seats, and implementing comprehensive audit trails for compliance.