Skill UI

Performs a structured, multi-phase audit on local branch changes (diffs) to identify security vulnerabilities, bugs, and code quality issues. It systematically checks for common risks like Injection (SQL, XSS), Broken Authentication, IDOR, CSRF, and business logic flaws, providing detailed severity, evidence, and suggested fixes. Ideal for pre-merge code reviews and security audits.

This skill acts as a comprehensive security scanner specializing in detecting Cross-Site Scripting (XSS) vulnerabilities in client-side code. It performs static analysis across React, Vue, Angular, and vanilla JavaScript, specifically identifying unsafe practices like direct HTML manipulation (innerHTML), raw rendering (v-html), and insecure URL handling. Use it when auditing frontend code for security flaws and needing best practices for secure coding.

A comprehensive guide for deploying applications, especially those integrated with AI services like Gamma, to major cloud environments including Vercel, AWS, GCP, and GitHub. Covers best practices for secret management, environment variable configuration, and setting up CI/CD pipelines across various cloud architectures.

A comprehensive guide for configuring API access across distinct environments (Development, Staging, Production) for SaaS services. It details architectural patterns for separating workspaces, managing environment-specific secrets (e.g., using AWS Secrets Manager), and implementing environment guards to ensure code behaves correctly and securely in different stages of deployment. Ideal for CI/CD pipeline setup and robust client-side configuration.

Generates production-ready Terraform, CloudFormation, Pulumi, ARM, or CDK templates via the infrastructure-as-code-generator plugin to automate cloud infrastructure deployment across AWS, Azure, and GCP from user specifications.

A comprehensive guide to configuring and managing Groq API access across development, staging, and production environments. This skill establishes environment-specific configurations, ensuring optimal model selection, rate limit handling, and secure secret management (using AWS, GCP, Vault) for robust and scalable LLM integrations.

An expert architect specializing in designing, implementing, and managing complex hybrid and multi-cloud environments. Expertise spans major public clouds (AWS, Azure, GCP), private clouds (OpenStack, VMware), and container platforms (Kubernetes). Focus areas include cross-cloud networking, Infrastructure as Code (IaC) using Terraform, workload optimization, zero-trust security implementation, and FinOps cost management.

This skill provides comprehensive guidance on establishing secure, high-performance connectivity between on-premises data centers and major public cloud providers (AWS, Azure, GCP). It covers various connection options, including Site-to-Site VPN, AWS Direct Connect, Azure ExpressRoute, and GCP Cloud Interconnect. Use this skill to design and implement complex hybrid network patterns (e.g., Hub-and-Spoke, Multi-Cloud), ensuring high availability, proper routing (BGP), and adherence to security best practices.

Automates iam policy creation for AWS Skills, activating when you mention the trigger, guiding best practices, generating production-ready configs, and validating outputs for compute, storage, networking, and serverless scenarios.

Automates AWS IAM role generation by guiding requests, applying best practices, and producing production-ready code/configs with validation for compute, storage, networking, and serverless workloads.

A comprehensive guide for configuring API access across development, staging, and production environments. This setup ensures strict isolation of API keys and environment-specific parameters (like models, speed, and caching). It covers best practices for secret management using major CI/CD and secret services (GitHub Actions, AWS Secrets Manager, GCP Secret Manager).

This skill guide provides advanced techniques for optimizing Ideogram API usage. It covers selecting optimal model tiers (e.g., Turbo vs. Standard) based on desired quality and speed, implementing prompt-based caching to reduce API calls and costs, and managing parallel generation with concurrency limits for high throughput. Additionally, it demonstrates CDN integration for rapid asset delivery.