Skill UI

This skill provides comprehensive, structured audit logging for OpenRouter API interactions. It automatically captures essential metadata like total cost, token usage, model details, latency, and status, while also performing PII redaction. The resulting audit trail is stored in an append-only SQLite database, making it ideal for building compliance-ready systems, detailed cost monitoring, and deep debugging of production environments.

A comprehensive guide for auditing and ensuring regulatory compliance (SOC2, GDPR, HIPAA) when integrating Large Language Models (LLMs) via OpenRouter. It covers best practices for data handling, access control, PII redaction, implementing robust audit trails, and configuring provider routing to maintain data sovereignty and meet strict industry standards.

A comprehensive technical audit checklist designed to validate the production readiness of OpenRouter API integrations. It covers critical areas including security practices (e.g., secret management, key rotation), system reliability (e.g., fallbacks, retries, timeouts), and observability requirements (e.g., structured logging, cost tracking). Use this guide before launching or during major operational reviews to ensure robust, scalable, and compliant deployments.

This skill enables the coordination of multiple specialized AI agents within a single session. It is designed for complex, multi-domain tasks such as comprehensive code reviews, security audits, or full-stack feature implementations. It coordinates expertise across various domains (backend, frontend, testing, architecture) to provide holistic analysis and actionable recommendations.

Run local Lighthouse audits via CLI or Node API, parse JSON/HTML reports, enforce performance budgets, integrate with CI (Actions/LHCI), and compare builds to catch regressions before deploys.

Conducts in-depth security audits across code, infrastructure, and configurations using the security-pro-pack toolkit to surface vulnerabilities, compliance gaps, and cryptographic weaknesses along with actionable remediation guidance.

Enables Claude to run a security-focused code review via the security-agent plugin, flagging SQL injection, XSS, authentication flaws, and unsafe dependencies with severity, location, impact, and remediation guidance for requested audits.

Automates Claude Code plugin audits whenever audit or security keywords appear, checking for vulnerabilities, compliance with CLAUDE.md standards, marketplace/MCP requirements, best practices, documentation, and repository hygiene before emitting a structured report.

This skill provides advanced techniques for optimizing PostHog Cloud usage and reducing associated costs. It covers auditing event volume, implementing intelligent event sampling (e.g., sampling pageviews or autocapture events), filtering bot traffic, and tuning session recording rates. The goal is to maintain critical analytical value while staying within budget limits.

This guide details implementing robust Role-Based Access Control (RBAC) within a PostHog Enterprise environment. It covers managing the three-level hierarchy (Organization > Project > Resource), assigning granular member roles (Owner, Admin, Member), configuring scoped API keys for secure integrations, and enforcing enterprise-grade authentication via SSO/SAML. Includes steps for setting up project permissions and auditing system changes.

A comprehensive guide for safely upgrading PostHog SDKs (for JavaScript and Node.js). This resource details critical breaking changes across major versions, such as the explicit requirement for `sendFeatureFlags` in v5.x and the new structured autocapture API for PostHog.js. It provides a structured, step-by-step procedure covering version auditing, code modification, testing, staging validation, and rollback plan.

This skill performs deep, line-by-line scanning of an entire codebase to understand its architecture, patterns, and dependencies. It systematically identifies critical issues across security vulnerabilities (SQL injection, secrets), performance bottlenecks (N+1 queries, caching), architectural flaws, and code quality gaps. It then automatically refactors and fixes all identified issues, transforming the code into professional, production-grade, enterprise-level quality.