Skill UI

Analyzes a website’s HTTP security headers to identify missing or misconfigured directives, then produces a graded report with scores and recommendations for strengthening protections against common web threats.

A comprehensive guide for developers on building secure and robust APIs across REST, GraphQL, and WebSocket protocols. It covers essential security patterns including robust authentication (JWT, OAuth 2.0), granular authorization (RBAC), input validation to prevent injection attacks (SQLi, XSS), rate limiting, and best practices for data encryption and secure headers. Essential for developers preparing for security audits.

Provides comprehensive guidelines for modern web development, covering critical areas like security best practices (e.g., CSP, HTTPS enforcement, input sanitization), browser compatibility (viewport, encoding), and avoiding deprecated APIs. Use this skill when aiming to audit, modernize, or improve the overall quality and robustness of web code.

A comprehensive guide for building production-grade Web3 applications, smart contracts, and decentralized systems. Covers expertise in DeFi protocols, NFT platforms, DAOs, cross-chain interoperability, and advanced smart contract security patterns (Solidity, Rust). Ideal for developers building complex, resilient decentralized finance (DeFi) and enterprise-grade blockchain solutions.

This guide details security best practices for integrating with Clay. It covers securing API keys, validating webhook signatures, isolating provider credentials, and redacting sensitive PII data. Essential for maintaining compliance and data integrity in production environments.

This comprehensive guide outlines essential, production-grade security best practices for implementing Clerk authentication. It covers securing environment variables, hardening middleware with crucial security headers (like CSP, X-Frame-Options), protecting API routes with granular authorization checks, and verifying webhooks using signature validation (svix). Use this when deploying or auditing an application to ensure maximum security posture.

A comprehensive skill for conducting offensive security assessments across major cloud providers, including Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP). It guides users through reconnaissance, authentication testing, resource enumeration, privilege escalation, and persistence techniques, strictly for authorized security engagements.

Walks through broken authentication assessments by analyzing login flows, password policies, brute-force/credential-stuffing, and session/token security to document vulnerabilities and mitigation steps for web applications.

Run comprehensive web application security assessments through Burp Suite’s proxy, repeater, and scanner features to intercept, modify, and analyze HTTP traffic while spotting vulnerabilities for remediation planning.

Guides intercepting HTTP traffic, modifying requests, using Repeater, defining scope, and running Burp Suite scans for systematic web application security testing.

This comprehensive guide details how to implement robust webhook endpoints for CodeRabbit, an AI-powered code review tool. It covers essential security practices, including signature validation (HMAC-SHA256), and provides structured methods for handling various event types (e.g., PR reviews, check run completions, comments). Use this skill when integrating CodeRabbit into CI/CD pipelines to automate notifications, track metrics, and enforce quality gates.

Automates searching the web for technical insights and packing them into clear GitHub issues so teams can immediately act on findings. Trigger it when you need research translated into tracked work or security/feature tickets.