Skill UI

A comprehensive guide detailing reference architecture patterns for implementing Clerk authentication in modern, enterprise-grade applications. Covers best practices for Next.js full-stack, microservices, multi-tenant SaaS, and cross-platform mobile/web synchronization, ensuring secure and scalable authentication flows.

This comprehensive guide outlines essential, production-grade security best practices for implementing Clerk authentication. It covers securing environment variables, hardening middleware with crucial security headers (like CSP, X-Frame-Options), protecting API routes with granular authorization checks, and verifying webhooks using signature validation (svix). Use this when deploying or auditing an application to ensure maximum security posture.

Learn how to configure and implement robust backend endpoints to handle webhooks from Clerk. This guide covers processing user lifecycle events (creation, update, deletion) and organization events, ensuring seamless data synchronization to your external database. It emphasizes secure practices like Svix signature verification and idempotency protection.

A comprehensive skill for conducting offensive security assessments across major cloud providers, including Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP). It guides users through reconnaissance, authentication testing, resource enumeration, privilege escalation, and persistence techniques, strictly for authorized security engagements.

Automate Cloudinary media workflows—folder creation, upload preset configuration, asset lookup, transformation generation, usage monitoring, and webhook setup—via natural-language commands routed through the Rube MCP server.

Walks through broken authentication assessments by analyzing login flows, password policies, brute-force/credential-stuffing, and session/token security to document vulnerabilities and mitigation steps for web applications.

Guides analysts through assessing web authentication, credential stuffing, password policies, session tokens, and fixation flows to uncover broken authentication risks before attackers do.

This skill covers the end-to-end development of cross-browser extensions (Chrome, Firefox). Expertise includes mastering Manifest V3, structuring complex architecture (service workers, content scripts), managing local/sync storage, building user interfaces, and implementing monetization models. Ideal for building robust, production-ready tools and navigating store publishing policies.

Run comprehensive web application security assessments through Burp Suite’s proxy, repeater, and scanner features to intercept, modify, and analyze HTTP traffic while spotting vulnerabilities for remediation planning.

Guides intercepting HTTP traffic, modifying requests, using Repeater, defining scope, and running Burp Suite scans for systematic web application security testing.

A comprehensive guide for designing production-grade lead enrichment pipelines in Clay. Covers three integration patterns (Webhook, API), detailed table schema design, advanced data waterfall logic, implementing complex ICP scoring formulas, and setting up robust CRM synchronization flows for go-to-market data operations.

Collects comprehensive diagnostic evidence for troubleshooting CodeRabbit integration issues. This bundle checks the App installation status, validates the `.coderabbit.yaml` configuration, reviews recent PR history, and verifies GitHub webhook deliveries. Essential for preparing support tickets and diagnosing complex SaaS integration failures.