Skill UI

Provides comprehensive patterns and techniques for securing AI agent systems. Learn how to enforce governance policies, including tool allow/block lists, content filtering, rate limiting, and human approval workflows. Essential for building robust, compliant, and trustworthy agents in multi-agent or production environments that interact with external APIs and sensitive data.

Conducts comprehensive AI prompt safety reviews that analyze bias, misinformation, injection, and privacy risks while delivering effectiveness evaluations, security guidance, and best-practice recommendations for prompt engineers.

This skill generates a detailed, multi-phase plan for complex, multi-file refactoring projects. It ensures safety by first analyzing the codebase, identifying dependencies, and structuring changes in a safe sequence (e.g., Types first, then implementations, followed by tests and cleanup). It forces the AI to output a comprehensive plan, including rollback steps and verification points, and waits for user confirmation before making any actual code changes.

A comprehensive scaffold generator for building Model Context Protocol (MCP) servers using TypeScript and Node.js. This tool provides a complete, production-ready boilerplate, including proper project structure, dependency management (e.g., @modelcontextprotocol/sdk, zod), and implementation details for tools and resources. It supports both HTTP and stdio transport mechanisms, ensuring type safety, robust error handling, and best practices for modern backend development.

This specialized skill automates the process of converting visual designs (from Stitch) into high-quality, modular React and Vite components. It adheres to modern frontend best practices, enforcing logic isolation via custom hooks, data decoupling using mock data files, and ensuring type safety with TypeScript interfaces. The workflow includes automated asset fetching, style mapping (Tailwind), and rigorous validation cycles to produce production-ready, maintainable code.

A collection of production-ready patterns for interacting with the Figma REST API and Plugin API. It provides type safety, robust error handling, and reusable abstractions for tasks like building client wrappers, extracting design tokens, and traversing complex node trees. Essential for building scalable, enterprise-grade Figma integrations.

This detailed guide outlines how to configure the Flexport API for isolated development, staging, and production environments. It enforces best practices for data separation using distinct API keys, webhook secrets, and implements critical safety guards to prevent accidental data access or modification across environments.

A collection of production-ready patterns for wrapping the Canva Connect REST API, supporting both TypeScript and Python implementations. These patterns ensure robust API integration by handling automatic OAuth token refresh, implementing retry logic with exponential backoff, ensuring type safety, and supporting multi-tenant architectures. Use this when building resilient, reusable API wrappers for Canva services.

This guide details how to implement robust content safety guardrails for applications powered by Claude. It covers essential techniques such as system prompt hardening, input validation to detect injection patterns and length limits, and output validation to prevent system prompt leakage. It ensures compliance with Anthropic's policies, making the AI integration secure and reliable.

This comprehensive skill provides multi-layered guardrails for integrating with LLMs like Claude. It enforces security and compliance by implementing input validation (PII detection, length checks), system prompt restriction (scope control, safety rules), output filtering (preventing sensitive data leakage), cost governance, and model access policies. Ideal for building secure, robust, and governed AI applications.

Execute comprehensive, asynchronous transcription workflows using AssemblyAI. This tool handles file upload, queues jobs, and provides advanced audio intelligence features. Capabilities include speaker diarization, sentiment analysis, named entity recognition (NER), topic categorization (IAB), content safety moderation, and sensitive PII redaction. Ideal for processing meeting recordings, interviews, and large volumes of spoken content.

Provides comprehensive security best practices for integrating AssemblyAI into production applications. This guide covers secure API key management (using environment variables), generating temporary tokens for browser streams, implementing PII redaction, managing data retention, and enabling content safety checks for compliance and security.