Skill UI

This skill enables Claude to generate production-ready CI/CD pipeline configurations for major platforms, including GitHub Actions, GitLab CI, and Jenkins. It automates the entire software development lifecycle, supporting best practices for testing, building, security scanning, and multi-environment deployment. Use this when setting up automated software delivery workflows.

Generates reusable Terraform modules based on user specifications by invoking the terraform-module-builder plugin to produce production-ready configurations that include documentation, security safeguards, and scalable patterns whenever an infrastructure-as-code structure is requested.

Automates HIPAA compliance checks across codebases, infrastructure configurations, and documentation by leveraging the hipaa-compliance-checker plugin to flag privacy, security, and access-control risks for projects handling PHI.

Automates OWASP Top 10 (2021) security assessments via the owasp-compliance-checker plugin, scanning codebases for vulnerabilities, reporting compliance gaps, and suggesting remediation advice for developers or auditors.

This skill scans session management code to spot insecure IDs, missing expirations, and fixation risks, then summarizes findings and remediation steps for developers needing a session-security audit.

This skill functions as an expert in workflow automation, specializing in designing and implementing robust CI/CD pipelines and GitHub Actions workflows. It guides users through automating the entire development lifecycle—from building and testing to secure deployment. By establishing clear stages, handling secrets, and defining rollback strategies, it ensures consistency, reduces manual effort, and accelerates delivery while maintaining high quality and security standards.

A comprehensive guide to setting up robust Role-Based Access Control (RBAC) and governance within enterprise data workspaces like Clay. Learn how to define specific user roles (Admin, Member, Viewer), allocate team credit budgets, isolate API keys, and conduct quarterly access audits to maintain data security and operational efficiency for large teams.

This guide details security best practices for integrating with Clay. It covers securing API keys, validating webhook signatures, isolating provider credentials, and redacting sensitive PII data. Essential for maintaining compliance and data integrity in production environments.

A comprehensive guide for engineering teams to manage critical incidents related to Clerk authentication and SaaS platform outages. It covers full incident lifecycle procedures, including initial triage, emergency auth bypass implementation, key rotation, session recovery scripts, and post-incident root cause analysis. Use this when facing production authentication failures or security breaches.

A comprehensive checklist for ensuring an application integrated with Clerk is fully production-ready. It covers essential steps across environment configuration, security hardening (e.g., CORS, rate limiting), monitoring setup, graceful error handling, and performance optimization necessary before launching to a live audience.

This comprehensive guide outlines essential, production-grade security best practices for implementing Clerk authentication. It covers securing environment variables, hardening middleware with crucial security headers (like CSP, X-Frame-Options), protecting API routes with granular authorization checks, and verifying webhooks using signature validation (svix). Use this when deploying or auditing an application to ensure maximum security posture.

A comprehensive workflow bundle covering the entire cloud-native development lifecycle. It guides users through critical phases, including cloud infrastructure setup (AWS, Azure, GCP, Terraform IaC), container orchestration with Kubernetes, robust CI/CD pipeline automation, observability implementation, security hardening, cost optimization, and disaster recovery planning. This ensures best practices across all stages of modern application deployment.