Skill UI

Guides multi-step deliveries by linking Antigravity skills into workflows for SaaS MVP launches, security audits, AI agent systems, and browser QA, recommending best-fit playbooks and verifying each artifact.

Guides multi-step deliveries by linking Antigravity skills into workflows for SaaS MVP launches, security audits, AI agent systems, and browser QA, recommending best-fit playbooks and verifying each artifact.

This comprehensive guide outlines essential, production-grade security best practices for implementing Clerk authentication. It covers securing environment variables, hardening middleware with crucial security headers (like CSP, X-Frame-Options), protecting API routes with granular authorization checks, and verifying webhooks using signature validation (svix). Use this when deploying or auditing an application to ensure maximum security posture.

This skill provides a robust framework for implementing Role-Based Access Control (RBAC) when integrating with Gamma API in enterprise or multi-tenant environments. Since Gamma's API key is workspace-level, this solution enforces granular, per-user permissions (Guest, Viewer, Editor, Admin) at the application layer. Key components include authorization middleware, multi-tenant isolation logic, usage quota management, and detailed audit logging, ensuring system security and compliance in large-scale deployments.

Implement comprehensive GDPR and CCPA compliance measures within Supabase. This skill guides developers on setting up Row Level Security (RLS) for tenant isolation, managing PII columns, executing right-to-deletion workflows, auditing sensitive data, and establishing automated data retention policies. Essential for any SaaS application handling regulated user data.

A comprehensive engineering stack for designing and implementing robust, production-grade payment gateways for Software-as-a-Service (SaaS) platforms targeting the Pakistani market. It covers integrating major local providers like JazzCash and Easypaisa, handling complex payment flows (PKR billing, webhooks, idempotency), and performing essential financial reconciliation and auditing processes. This guide ensures high correctness and reliability in B2B/SaaS billing operations in Pakistan.

This skill analyzes proxy access logs, DNS query logs, and network flow data to identify unauthorized SaaS and cloud services (Shadow IT). It uses Python and pandas to aggregate traffic, classify domains against known SaaS categories, and calculate risk scores based on data volume and user count. Ideal for conducting thorough security audits and generating actionable remediation reports.

This tool performs a comprehensive review of OAuth 2.0 scopes, identifying over-permissioned third-party application integrations, excessive API scopes, and unused token grants. It is crucial for implementing the principle of least privilege across complex identity providers and SaaS ecosystems. Use cases include compliance auditing (GDPR, SOC 2), post-incident security reviews, and managing shadow IT risk by auditing cross-boundary consent grants.

A comprehensive guide for preparing SaaS and cloud infrastructure companies for SOC 2 Type I and Type II audits. Covers mapping Trust Service Criteria (TSC), generating control matrices, performing thorough gap analysis, collecting evidence, and assessing overall compliance readiness across Security, Availability, Confidentiality, and Privacy domains. Essential for demonstrating operational trustworthiness to enterprise clients.

This advanced skill audits legal contracts against comprehensive, industry-standard checklists. It identifies critical gaps, including missing universal protections (e.g., limitation of liability, governing law) and type-specific clauses (e.g., NDA, SaaS). The tool rates the urgency of each omission and provides ready-to-insert, compliant clause language, helping users mitigate legal risks before signing.

A comprehensive tool for BizOps and VMO operators to conduct proactive, multi-dimensional vendor performance audits. It scores SaaS and third-party vendors using weighted criteria (reliability, security, support), tracks SLA compliance to identify potential credit claims, and classifies third-party risk across critical vectors (data, financial, regulatory). Ideal for quarterly vendor health checks and defensible renewal recommendations.

A comprehensive tool for managing and optimizing XML sitemaps. This utility allows users to analyze existing sitemaps for SEO health issues (e.g., 404 errors, stale dates, robots.txt conflicts) and to generate new, structured sitemaps. It adheres to industry best practices across various models (eCommerce, SaaS, etc.), ensuring optimal indexation for search engines.