Skill UI

A comprehensive technical audit checklist designed to validate the production readiness of OpenRouter API integrations. It covers critical areas including security practices (e.g., secret management, key rotation), system reliability (e.g., fallbacks, retries, timeouts), and observability requirements (e.g., structured logging, cost tracking). Use this guide before launching or during major operational reviews to ensure robust, scalable, and compliant deployments.

This guide provides comprehensive instructions for deploying applications powered by the Perplexity Sonar API. It covers setup for major cloud platforms like Vercel, Google Cloud Run, and Docker. Users can deploy production-ready endpoints, manage required secrets, implement edge functions, and utilize caching mechanisms (e.g., Redis) to ensure high availability and performance in production environments.

This skill performs deep, line-by-line scanning of an entire codebase to understand its architecture, patterns, and dependencies. It systematically identifies critical issues across security vulnerabilities (SQL injection, secrets), performance bottlenecks (N+1 queries, caching), architectural flaws, and code quality gaps. It then automatically refactors and fixes all identified issues, transforming the code into professional, production-grade, enterprise-level quality.

This comprehensive skill manages the full lifecycle deployment of applications on the Replit platform. It supports three key deployment types: Static (for frontends), Autoscale (for variable APIs), and Reserved VM (for always-on services). Use this for configuring production environments, setting up custom domains, implementing health checks, managing environment secrets, and optimizing scaling strategies.

This guide provides a comprehensive setup for Replit applications. It covers configuring essential files like .replit and replit.nix for dependency management, securely managing environment secrets (AES-256), and integrating robust user authentication via Replit Auth (supporting Google, GitHub, etc.). Ideal for starting a new, production-ready Replit project.

This guide identifies and explains common anti-patterns and critical pitfalls encountered when building applications on the Replit platform. Topics include data persistence, secret management, networking bindings, and environment configuration. Use this resource when conducting code reviews, onboarding new developers, or auditing existing Replit applications for best practices.

This comprehensive guide details how to configure robust multi-environment deployments (Development, Staging, Production) within the Replit ecosystem. It covers best practices for database separation, managing environment-specific secrets, implementing reliable environment detection logic, and setting up CI/CD pipelines to ensure applications are stable and secure across all deployment stages.

This skill provides comprehensive guardrails for securing Replit-hosted applications. It covers critical security policies including preventing hardcoded secrets, implementing resource usage limits (CPU/Memory), enforcing endpoint authentication, and ensuring proper deployment configuration. Use this when you need to harden a Replit app for production or audit its security posture.

A comprehensive, step-by-step guide for deploying applications on Replit to production environments. It covers crucial best practices, including configuring deployment settings, managing environment secrets, implementing robust health checks, handling global errors, setting up custom domains, and defining rollback strategies. Essential for developers preparing an app for a live launch or scaling up.

A comprehensive guide detailing security best practices for building and deploying applications on the Replit platform. Learn how to properly manage sensitive data using Replit Secrets (AES-256 encryption), implement secure service-to-service authentication via REPL_IDENTITY tokens, validate custom headers, and prevent common vulnerabilities like hardcoded API keys and SQL injection. Essential for auditing and securing production environments.

Scans your codebase with pattern matching and entropy analysis to detect exposed secrets like API keys, passwords, and private keys, then generates remediation reports so you can fix vulnerabilities before committing or deploying code.

Secret Scanner Assistant auto-activates within Security Fundamentals to guide you on secret detection, authentication, validation, secure coding, and vulnerability checks with best practices.