Skill UI

This comprehensive guide details how to implement robust webhook endpoints for CodeRabbit, an AI-powered code review tool. It covers essential security practices, including signature validation (HMAC-SHA256), and provides structured methods for handling various event types (e.g., PR reviews, check run completions, comments). Use this skill when integrating CodeRabbit into CI/CD pipelines to automate notifications, track metrics, and enforce quality gates.

Automatically assists with generating Content Security Policies, offering step-by-step guidance, production-ready code, and validation against common standards whenever you mention or ask about CSP generation.

Automated guidance for cookie security analysts that covers authentication, validation, secure coding, and vulnerability detection while generating production-ready code and configurations.

Automates cors policy validator tasks in the Security Fundamentals domain, offering best-practice guidance, prompt validation, and production-ready configuration snippets whenever you ask about cors policy patterns or hardening.

Automates CSRF protection validator guidance within Security Fundamentals, offering best-practice patterns, production-ready code, and validation checks for authentication and secure-coding tasks.

Automates dependency vulnerability checks within the Security Fundamentals skill set, guiding users through best practices, secure coding patterns, and remediation-ready output validation.

A comprehensive expert for configuration management, specializing in validating, testing, and ensuring the correctness of application settings. It creates robust validation schemas (e.g., JSON Schema) and performs critical checks, including identifying potential security secrets (API keys, passwords), ensuring data consistency across different environments (development, staging, production), and enforcing type safety for reliable deployments.

Coordinates a repeatable pre-PR or pre-release workflow for Django apps, covering environment validation, linting, formatting, migrations, tests with coverage, security scans, performance validation, and static asset readiness to ensure deployment confidence.

Offers an automated Env Secret Detector assistant in the Security Fundamentals domain, providing guidance, patterns, validations, and ready-to-use code for detecting and preventing exposed secrets.

This guide provides comprehensive best practices for securing Evernote API integrations. It covers essential topics like secure credential management using environment variables or vaults, implementing CSRF-protected OAuth flows, encrypting access tokens at rest using AES-256-GCM, rigorous input validation, and ensuring secure logging practices by redacting sensitive data. Use this when hardening your application against data breaches.

Automatically assists with generating Firebase security rules, offering best-practice guidance, template configurations, and validation checks tailored for GCP compute, storage, and data workloads.

This skill guides the development of robust, security-focused full-stack web applications. It ensures layered security coverage across the entire application stack, from database queries (parameterized queries) to API endpoints (authentication/authorization) and frontend components (input validation, output encoding). Use this when building end-to-end features, microservices, or REST APIs that require simultaneous attention to Frontend, Backend, and Security best practices.