Skill UI

A comprehensive guide to securely implementing Supabase across diverse modern application stacks. This skill covers critical patterns for Next.js Server Components (SSR), Single Page Applications (SPA), React Native mobile apps, Edge Functions (Serverless), and complex multi-tenant deployments using RLS or schema isolation. It guides developers on correctly managing client types (anon vs. service_role) and handling authentication flows in various environments.

Implement comprehensive GDPR and CCPA compliance measures within Supabase. This skill guides developers on setting up Row Level Security (RLS) for tenant isolation, managing PII columns, executing right-to-deletion workflows, auditing sensitive data, and establishing automated data retention policies. Essential for any SaaS application handling regulated user data.

A comprehensive guide to implementing enterprise-grade Supabase architectures. This skill covers advanced patterns like monorepo layout, multi-tenant Row Level Security (RLS) isolation, microservices integration, and operational patterns (caching, queues, audit logging). Use this when building complex, scalable, and production-ready applications on Supabase.

Focuses on advanced threat detection within Azure AD/Entra ID. This skill guides users on correlating Graph API audit logs, sign-in anomalies, and KQL queries in Microsoft Sentinel to identify sophisticated lateral movement techniques, such as privilege escalation, OAuth abuse, and cross-tenant pivoting. Essential for SOC threat hunting.

Implement Kubernetes RBAC to enforce least-privilege access across namespaces, covering Role/ClusterRole design, binding configuration, service account hardening, OIDC integration, and audit logging for multi-tenant clusters.

A comprehensive framework for testing REST and GraphQL APIs against Broken Object Level Authorization (BOLA) and Insecure Direct Object Reference (IDOR). This tool simulates an attacker's behavior by systematically intercepting and modifying object identifiers (IDs, UUIDs, slugs) within API calls. It helps identify critical authorization flaws, ensuring that an authenticated user cannot access or modify resources belonging to other tenants or users, adhering to OWASP API Security Top 10.

A comprehensive methodology for penetration testing web applications to identify broken access control vulnerabilities. This guide covers systematic testing for Role-Based Access Control (RBAC), privilege escalation, insecure direct object references (IDOR), and API authorization flaws in multi-tenant environments. It outlines the use of tools like Burp Suite and ffuf to map endpoints and simulate various user roles.

This guide provides comprehensive patterns for designing and implementing secure multi-tenant SaaS applications using shared databases. It covers critical techniques like Row-Level Security (RLS) in PostgreSQL, implementing tenant-aware middleware in TypeScript (Express/Fastify), and enforcing data scoping at the ORM level (Prisma/Drizzle). Learn how to prevent data leakage and manage tenant isolation across shared schemas.

Provides comprehensive, enterprise-level monitoring for all Power Automate flows across an entire tenant. Using a cached store, it tracks failure rates, run health trends, asset inventory (makers, apps, connections), and compliance reports without hitting API rate limits. Ideal for governance teams needing an aggregated view of platform health and root-cause analysis.

This guide details the operational workflow for namespace-scoped tenants within KubeSphere DevOps. It outlines how users without cluster-admin privileges can securely perform DevOps operations by strictly utilizing KubeSphere's dedicated APIs (`/kapis/`) and authenticating via OAuth tokens, ensuring strict resource isolation and access control within their designated namespace.

KubeSphere Core acts as the central operating system for cloud-native application management built on Kubernetes. It provides essential functions, including API aggregation, multi-cluster routing, and multi-tenant separation. It manages core resources and simplifies complex cloud-native deployment and operation tasks.

A comprehensive guide for configuring ArgoCD within KubeSphere DevOps. It details implementing GitOps continuous deployment, covering application management, multi-cluster setup, SSO integration via Dex, and best practices for managing application state synchronization from Git repositories. Learn the differences between direct ArgoCD and KubeSphere's tenant-friendly GitOps application creation.