Skill UI

A comprehensive guide for building production-grade Web3 applications, smart contracts, and decentralized systems. Covers expertise in DeFi protocols, NFT platforms, DAOs, cross-chain interoperability, and advanced smart contract security patterns (Solidity, Rust). Ideal for developers building complex, resilient decentralized finance (DeFi) and enterprise-grade blockchain solutions.

This comprehensive guide outlines essential, production-grade security best practices for implementing Clerk authentication. It covers securing environment variables, hardening middleware with crucial security headers (like CSP, X-Frame-Options), protecting API routes with granular authorization checks, and verifying webhooks using signature validation (svix). Use this when deploying or auditing an application to ensure maximum security posture.

Walks through broken authentication assessments by analyzing login flows, password policies, brute-force/credential-stuffing, and session/token security to document vulnerabilities and mitigation steps for web applications.

Run comprehensive web application security assessments through Burp Suite’s proxy, repeater, and scanner features to intercept, modify, and analyze HTTP traffic while spotting vulnerabilities for remediation planning.

Guides intercepting HTTP traffic, modifying requests, using Repeater, defining scope, and running Burp Suite scans for systematic web application security testing.

This skill provides structured guidance and patterns for performing comprehensive web fuzzing using the powerful command-line tool, ffuf. Web fuzzing is an essential security testing technique used by penetration testers to discover hidden directories, unlinked endpoints, or sensitive files on a web server by systematically brute-forcing potential paths and parameters. Use this skill when you need to audit the security posture of a web application or map out unknown parts of a website.

An expert skill dedicated to building secure, robust frontend applications. It specializes in preventing client-side vulnerabilities such as XSS and clickjacking. Core capabilities include safe DOM manipulation, implementing Content Security Policy (CSP), advanced input sanitization (allowlisting), and securing complex interactions like secure redirects and session management.

This skill guides the development of robust, security-focused full-stack web applications. It ensures layered security coverage across the entire application stack, from database queries (parameterized queries) to API endpoints (authentication/authorization) and frontend components (input validation, output encoding). Use this when building end-to-end features, microservices, or REST APIs that require simultaneous attention to Frontend, Backend, and Security best practices.

Specialized skill for designing, building, and optimizing modern, cloud-native enterprise Java applications. Covers microservices architecture, Spring Boot 3.x, reactive programming (WebFlux), advanced data persistence (JPA optimization, R2DBC), and robust security implementation (OAuth2/JWT). Use this when implementing DDD patterns, ensuring high test coverage, and managing complex transaction boundaries.

This guide details secure methods for connecting external applications to the Linear API. It covers essential security practices, including secure storage of API keys using environment variables, implementing OAuth 2.0 with PKCE for robust authentication, managing token refresh cycles, and verifying webhook signatures using HMAC-SHA256. Essential for building production-grade, secure integrations.

Guide to mastering essential security scanning tools for network discovery, vulnerability assessment, web application testing, wireless checks, and compliance reporting, covering selection, configuration, and practical workflows.

A comprehensive, multi-phase workflow designed for conducting deep security audits across modern web applications and APIs. This bundle guides users through the entire security lifecycle, including reconnaissance, vulnerability scanning (SAST/DAST), specific testing for OWASP Top 10 and injection flaws, specialized API fuzzing, full-scope penetration testing, security hardening, and final risk reporting. Ideal for compliance checks and proactive security enhancement.