Skill UI

A comprehensive guide to securely implementing Supabase across diverse modern application stacks. This skill covers critical patterns for Next.js Server Components (SSR), Single Page Applications (SPA), React Native mobile apps, Edge Functions (Serverless), and complex multi-tenant deployments using RLS or schema isolation. It guides developers on correctly managing client types (anon vs. service_role) and handling authentication flows in various environments.

Implement comprehensive GDPR and CCPA compliance measures within Supabase. This skill guides developers on setting up Row Level Security (RLS) for tenant isolation, managing PII columns, executing right-to-deletion workflows, auditing sensitive data, and establishing automated data retention policies. Essential for any SaaS application handling regulated user data.

A comprehensive guide to implementing enterprise-grade Supabase architectures. This skill covers advanced patterns like monorepo layout, multi-tenant Row Level Security (RLS) isolation, microservices integration, and operational patterns (caching, queues, audit logging). Use this when building complex, scalable, and production-ready applications on Supabase.

Focuses on advanced threat detection within Azure AD/Entra ID. This skill guides users on correlating Graph API audit logs, sign-in anomalies, and KQL queries in Microsoft Sentinel to identify sophisticated lateral movement techniques, such as privilege escalation, OAuth abuse, and cross-tenant pivoting. Essential for SOC threat hunting.

Implement Kubernetes RBAC to enforce least-privilege access across namespaces, covering Role/ClusterRole design, binding configuration, service account hardening, OIDC integration, and audit logging for multi-tenant clusters.

A specialized skill for assessing REST and GraphQL APIs against Broken Object Level Authorization (BOLA/IDOR), a critical vulnerability highlighted by OWASP API1:2023. This process involves intercepting API calls, identifying object identifiers (numeric IDs, UUIDs, slugs), and systematically substituting these IDs with those belonging to other users or tenants. It verifies whether the API server correctly enforces per-object authorization checks, mitigating risks of horizontal privilege escalation and unauthorized data access in multi-tenant environments.

A comprehensive guide for systematically assessing web applications and APIs for broken access control vulnerabilities (OWASP A01:2021). The methodology covers role-based access control (RBAC) auditing, horizontal and vertical privilege escalation, and multi-tenant data leakage using tools like Burp Suite, ffuf, and custom scripts. Essential for authorized penetration testing and security audits.

This guide provides comprehensive patterns for designing and implementing secure multi-tenant SaaS applications using shared databases. It covers critical techniques like Row-Level Security (RLS) in PostgreSQL, implementing tenant-aware middleware in TypeScript (Express/Fastify), and enforcing data scoping at the ORM level (Prisma/Drizzle). Learn how to prevent data leakage and manage tenant isolation across shared schemas.

Tenant-wide Power Automate monitoring via FlowStudio MCP cached store. Track failure rates, run-health trends, maker/app inventory, inactive owners, and compliance/health reports. Requires Pro+ subscription.

This guide details the operational workflow for namespace-scoped tenants within KubeSphere DevOps. It outlines how users without cluster-admin privileges can securely perform DevOps operations by strictly utilizing KubeSphere's dedicated APIs (`/kapis/`) and authenticating via OAuth tokens, ensuring strict resource isolation and access control within their designated namespace.

KubeSphere Core acts as the central operating system for cloud-native application management built on Kubernetes. It provides essential functions, including API aggregation, multi-cluster routing, and multi-tenant separation. It manages core resources and simplifies complex cloud-native deployment and operation tasks.

A comprehensive guide for configuring ArgoCD within KubeSphere DevOps. It details implementing GitOps continuous deployment, covering application management, multi-cluster setup, SSO integration via Dex, and best practices for managing application state synchronization from Git repositories. Learn the differences between direct ArgoCD and KubeSphere's tenant-friendly GitOps application creation.