Skill UI

An expert developer specializing in secure backend coding practices, vulnerability mitigation, and robust API design. Proficient in preventing common attacks such as SQL injection, XSS, and CSRF. Covers comprehensive areas including input validation, authentication mechanisms (OAuth 2.0, MFA), database security, and implementing necessary security headers (CSP, HSTS) for building secure-by-design applications. Ideal for implementing security fixes or building new, hardened backend services.

Automates code injection detection guidance as part of Security Fundamentals, offering step-by-step advice, best-practice patterns, and production-ready snippets for authentication, input validation, and secure coding scenarios.

This comprehensive template provides a production-grade reference architecture for CodeRabbit AI code reviews. It is designed to guide teams in establishing rigorous coding standards by defining specific, best-practice instructions for various layers (API, Database, Authentication, Frontend, CI/CD, Infrastructure). Use this as a robust starting point to build a comprehensive, automated, and secure code quality review process.

This skill provides a comprehensive guide to configuring CodeRabbit for advanced, security-focused code reviews. It teaches how to implement rules for detecting hardcoded secrets, common vulnerabilities (like SQL injection and XSS), and enforcing secure coding standards across APIs, databases, and infrastructure code. Use this when hardening a codebase's security posture or ensuring compliance with industry standards.

Automated guidance for cookie security analysts that covers authentication, validation, secure coding, and vulnerability detection while generating production-ready code and configurations.

Automates CSRF protection validator guidance within Security Fundamentals, offering best-practice patterns, production-ready code, and validation checks for authentication and secure-coding tasks.

A comprehensive guide to avoiding common pitfalls when using AI-powered IDEs like Cursor. It covers best practices for AI interaction, secure coding habits (handling secrets, credentials), project configuration (rules, ignore files), and performance optimization. Essential for maintaining high code quality and security in AI-assisted workflows.

A comprehensive guide for administrators and teams on setting up Cursor for enterprise use. It covers organizational plan selection (Pro, Business, Enterprise), advanced features like SSO, SCIM provisioning, and Privacy Mode enforcement. The guide details setting up roles, managing usage analytics, defining shared project rules via Git, and providing a structured onboarding checklist to ensure seamless adoption and secure coding practices across the organization.

Automates dependency vulnerability checks within the Security Fundamentals skill set, guiding users through best practices, secure coding patterns, and remediation-ready output validation.

This skill acts as a comprehensive security scanner specializing in detecting Cross-Site Scripting (XSS) vulnerabilities in client-side code. It performs static analysis across React, Vue, Angular, and vanilla JavaScript, specifically identifying unsafe practices like direct HTML manipulation (innerHTML), raw rendering (v-html), and insecure URL handling. Use it when auditing frontend code for security flaws and needing best practices for secure coding.

An expert skill dedicated to building secure, robust frontend applications. It specializes in preventing client-side vulnerabilities such as XSS and clickjacking. Core capabilities include safe DOM manipulation, implementing Content Security Policy (CSP), advanced input sanitization (allowlisting), and securing complex interactions like secure redirects and session management.

Automates hardcoded credential discovery by guiding you through secure coding patterns, validation checks, and remediation strategies tailored to security fundamentals engagements.