Skill UI

Guides Spring Boot 3.x engineers through configuration scaffolds, REST controllers, Spring Security 6 authentication flows, Spring Data JPA repositories, and reactive WebFlux endpoints, making it easier to build microservices and Java REST APIs.

This skill provides a comprehensive guide to securing Supabase projects. It covers critical security measures, including proper separation of anonymous and service role keys, enforcing Row Level Security (RLS) on all tables, and hardening the API surface. Use this when setting up a new project, performing security audits, or implementing robust data access control policies.

Validating Authentication Implementations assesses authentication mechanisms like JWT, OAuth, sessions, and API keys against security standards, then reports vulnerabilities and recommendations for password policy, MFA, token handling, and session security.

This skill provides robust guidelines and patterns for managing environment variables and sensitive credentials securely. It is designed to ensure that secrets, API keys, and other confidential information are never accidentally exposed or logged in Claude sessions, terminal outputs, development logs, or version control commits (like Git). Use this skill when handling sensitive data in development workflows to maintain maximum security.

This comprehensive guide outlines security best practices for utilizing Vast.ai's cloud environment. It covers secure API key management, hardening SSH access to GPU instances, implementing proper data cleanup before instance destruction, and adhering to robust network security protocols. Use this when setting up, auditing, or deploying sensitive AI/ML workloads on shared cloud hardware.

This skill guides users through implementing comprehensive security measures for Vercel deployments. It covers best practices for secret management (using sensitive environment variables), configuring critical HTTP security headers (such as CSP and HSTS), protecting preview environments, and enforcing robust access control for API routes and deployment tokens.

Provides comprehensive expertise for building robust WordPress sites. Specializing in custom theme and plugin development, implementing modern Gutenberg blocks, extending WooCommerce functionality, and managing the WordPress REST API. Core focus areas include advanced security hardening (nonces, sanitization, capability checks), performance optimization (caching, query tuning), and adhering strictly to WordPress coding standards.

Provides red team workflows combining subdomain enumeration, live host discovery, technology fingerprinting, XSS hunting, API fuzzing, and automated recon scripting to support bug bounty hunters and security researchers.

A specialized assistant designed to act as a senior software architect. It critiques code generated by AI tools or rapidly prototyped code, moving beyond simple syntax checks. The auditor identifies deep structural flaws, technical debt, architectural weaknesses, and production risks (e.g., security vulnerabilities, poor error handling, tight coupling) that make code fragile or unsuitable for deployment.

This guide provides a comprehensive walkthrough for developing and deploying Apify Actors. Actors are serverless, containerized applications designed for powerful tasks like web scraping, data processing, and complex automation. Learn the mandatory setup, template selection (Python, JS, TS), step-by-step development workflow, and crucial security best practices for building robust, production-ready data pipelines.

Automatically scans modern API frameworks (Next.js, Express, FastAPI, Django) to generate comprehensive, ready-to-run test suites. It ensures complete coverage for critical areas including authentication, input validation (boundary/injection), error code matrices, pagination, file uploads, and rate limiting. Ideal for TDD, contract testing, and security audits.

A powerful skill for conducting structured, systematic code reviews for PRs and MRs. It goes beyond basic style checks, performing deep analysis such as blast radius tracing, comprehensive security scanning (SQLi, XSS, secrets), detecting breaking changes in APIs/DB schemas, and calculating test coverage delta. Ideal for reviewing large, complex, or security-sensitive code changes before merging.