Skill UI

Automates api key manager support within the Security Fundamentals area, offering guidance, secure patterns, production-ready examples, and validation of outputs whenever api key manager context is mentioned.

Automates api key manager support within the Security Fundamentals area, offering guidance, secure patterns, production-ready examples, and validation of outputs whenever api key manager context is mentioned.

A comprehensive guide for developers on building secure and robust APIs across REST, GraphQL, and WebSocket protocols. It covers essential security patterns including robust authentication (JWT, OAuth 2.0), granular authorization (RBAC), input validation to prevent injection attacks (SQLi, XSS), rate limiting, and best practices for data encryption and secure headers. Essential for developers preparing for security audits.

A specialized workflow guide for comprehensive security testing of REST and GraphQL APIs. It systematically covers critical security aspects such as authentication validation (OAuth2, JWT), authorization checks (IDOR, privilege escalation), input validation (SQL/NoSQL injection), rate limiting enforcement, and secure error handling. Ideal for vulnerability assessment, bug bounty programs, and pre-deployment security audits.

Automates guidance for Attack Surface Analyzer within the Security Advanced domain, offering best practices, code snippets, and validation to help with penetration testing, compliance, and threat modeling workflows.

Automates guidance for Attack Surface Analyzer within the Security Advanced domain, offering best practices, code snippets, and validation to help with penetration testing, compliance, and threat modeling workflows.

This skill automates the validation of AWS environments against critical industry compliance benchmarks. It performs detailed checks for CIS AWS Foundations, PCI-DSS, HIPAA, and SOC 2 standards, covering key areas like Identity and Access Management (IAM), logging, data protection, and network security. Essential for preparing for regulatory audits and maintaining continuous secure operations.

An expert developer specializing in secure backend coding practices, vulnerability mitigation, and robust API design. Proficient in preventing common attacks such as SQL injection, XSS, and CSRF. Covers comprehensive areas including input validation, authentication mechanisms (OAuth 2.0, MFA), database security, and implementing necessary security headers (CSP, HSTS) for building secure-by-design applications. Ideal for implementing security fixes or building new, hardened backend services.

This comprehensive guide outlines essential, production-grade security best practices for implementing Clerk authentication. It covers securing environment variables, hardening middleware with crucial security headers (like CSP, X-Frame-Options), protecting API routes with granular authorization checks, and verifying webhooks using signature validation (svix). Use this when deploying or auditing an application to ensure maximum security posture.

Automates code injection detection guidance as part of Security Fundamentals, offering step-by-step advice, best-practice patterns, and production-ready snippets for authentication, input validation, and secure coding scenarios.

An expert AI specialist that integrates advanced static analysis (e.g., CodeQL, SonarQube) with modern DevOps practices. It performs multi-layered code reviews, checking for security vulnerabilities, performance bottlenecks, architectural flaws, and adherence to best practices across various languages. Ideal for CI/CD pipelines and pull request validation.

This skill executes CodeRabbit's core workflow, providing automated, in-depth code reviews directly on pull requests. It analyzes code diffs based on custom rules (e.g., API validation, DB security), generates detailed walkthrough summaries, and posts line-level feedback. Ideal for setting up robust CI/CD quality gates and maintaining high code standards throughout the development lifecycle.