Skill UI

Enables Claude to run a security-focused code review via the security-agent plugin, flagging SQL injection, XSS, authentication flaws, and unsafe dependencies with severity, location, impact, and remediation guidance for requested audits.

Automates vulnerability scans for applications and APIs via the security-test-scanner plugin, covering OWASP Top 10, SQL injection, XSS, CSRF, authentication, and authorization weaknesses while generating detailed remediation reports.

This guide provides comprehensive instructions for installing and configuring the Perplexity Sonar API authentication. It details setting up the necessary environment variables and using the standard OpenAI client library (for both Node.js and Python) to connect to Perplexity's API endpoint. Learning this process is essential for developers starting a new Perplexity integration, setting up API keys, or verifying API connectivity.

A comprehensive guide for integrating Plaid API into fintech applications. Covers secure link token creation, public token exchange for persistent access tokens, and real-time transaction synchronization using the /transactions/sync endpoint. Includes best practices for identity verification, ACH authentication, and webhook handling, ensuring robust financial data connectivity.

This comprehensive guide provides solutions for common PostHog integration issues, helping developers diagnose and fix tracking failures. It covers critical topics including event capture problems, feature flag misbehavior, API authentication errors (401/429), and user identity fragmentation. Learn best practices for robust data analytics implementation.

This guide details implementing robust Role-Based Access Control (RBAC) within a PostHog Enterprise environment. It covers managing the three-level hierarchy (Organization > Project > Resource), assigning granular member roles (Owner, Admin, Member), configuring scoped API keys for secure integrations, and enforcing enterprise-grade authentication via SSO/SAML. Includes steps for setting up project permissions and auditing system changes.

An end-to-end workflow for building robust, production-ready Python backend APIs. This guide covers all stages, including project scaffolding, SQLAlchemy database integration, Pydantic validation, implementing JWT/OAuth2 authentication, comprehensive error handling, unit testing, and Docker deployment for modern microservices.

This comprehensive workflow guides developers through building a production-ready, full-stack web application entirely within the Replit environment. It covers setting up the entire architecture, including Express/Flask backend logic, robust PostgreSQL database integration for persistent data, implementing secure user authentication using Replit Auth, and managing file uploads via Object Storage. It is the definitive guide for launching a complex, scalable SaaS project from scratch.

This skill guides users through building a minimal yet comprehensive working application on the Replit platform. It demonstrates how to integrate and use core platform services such as the built-in Key-Value Database, Object Storage for file handling, user Authentication, and standard web frameworks (Express/Flask). Use this guide when starting a new Replit project or when learning the foundational infrastructure services provided by the platform.

This guide provides a comprehensive setup for Replit applications. It covers configuring essential files like .replit and replit.nix for dependency management, securely managing environment secrets (AES-256), and integrating robust user authentication via Replit Auth (supporting Google, GitHub, etc.). Ideal for starting a new, production-ready Replit project.

This skill provides comprehensive guardrails for securing Replit-hosted applications. It covers critical security policies including preventing hardcoded secrets, implementing resource usage limits (CPU/Memory), enforcing endpoint authentication, and ensuring proper deployment configuration. Use this when you need to harden a Replit app for production or audit its security posture.

A comprehensive guide detailing security best practices for building and deploying applications on the Replit platform. Learn how to properly manage sensitive data using Replit Secrets (AES-256 encryption), implement secure service-to-service authentication via REPL_IDENTITY tokens, validate custom headers, and prevent common vulnerabilities like hardcoded API keys and SQL injection. Essential for auditing and securing production environments.