Skill UI

Collects Docker build, compose, and runtime tips including multi-stage builds, isolated dependencies, compose healthchecks, .dockerignore, image analysis, and security anti-patterns to streamline container pipelines.

An expert resource for optimizing, securing, and deploying containerized applications. Covers multi-stage Dockerfile builds, container security hardening (non-root users, secrets), advanced Docker Compose orchestration, and best practices for production-ready CI/CD pipelines.

Provides containerized development patterns for Docker and Docker Compose, covering local dev stacks, networking, volume management, security hardening, and multi-service orchestration best practices.

A comprehensive guide detailing essential security best practices for integrating with Documenso document signing. Covers critical topics such as secure API key management (using environment variables), robust webhook secret verification (preventing timing attacks), implementing least privilege document access control, and setting up secure self-hosted signing certificates and secrets.

Offers an automated Env Secret Detector assistant in the Security Fundamentals domain, providing guidance, patterns, validations, and ready-to-use code for detecting and preventing exposed secrets.

A sophisticated AI system that coordinates multiple specialized agents (e.g., Security Auditors, Performance Analysts, Architecture Specialists) to perform comprehensive, multi-perspective code assessments. It analyzes code context, manages state, and synthesizes conflicting insights to provide deep, holistic reviews for complex software projects.

Master the complete penetration testing lifecycle, covering all five stages from reconnaissance and scanning to vulnerability analysis using OWASP standards, and advanced exploitation techniques with tools like Metasploit. This skill provides a structured framework for conducting authorized, professional security assessments.

This guide provides comprehensive best practices for securing Evernote API integrations. It covers essential topics like secure credential management using environment variables or vaults, implementing CSRF-protected OAuth flows, encrypting access tokens at rest using AES-256-GCM, rigorous input validation, and ensuring secure logging practices by redacting sensitive data. Use this when hardening your application against data breaches.

A comprehensive guide and implementation pattern for enforcing granular Role-Based Access Control (RBAC) on the Exa search API in multi-tenant or enterprise environments. This skill demonstrates how to implement API key scoping, restrict search domains by role, enforce maximum result limits, and track daily usage to ensure robust data governance and security.

This comprehensive guide details essential security practices for integrating the Exa API. It covers key areas such as secure API key management using environment variables, implementing content moderation to filter unsafe results, restricting results via domain allow/block lists, and sanitizing user queries to prevent injection attacks. Use this when hardening or auditing an Exa-powered application.

Performs authorized file path traversal assessments to map web inputs, craft traversal payloads, and document sensitive files that can be read, aiding defenders in hardening filesystem handling during security reviews.

Performs a structured, multi-phase audit on local branch changes (diffs) to identify security vulnerabilities, bugs, and code quality issues. It systematically checks for common risks like Injection (SQL, XSS), Broken Authentication, IDOR, CSRF, and business logic flaws, providing detailed severity, evidence, and suggested fixes. Ideal for pre-merge code reviews and security audits.