Skill UI

This skill automates the validation of AWS environments against critical industry compliance benchmarks. It performs detailed checks for CIS AWS Foundations, PCI-DSS, HIPAA, and SOC 2 standards, covering key areas like Identity and Access Management (IAM), logging, data protection, and network security. Essential for preparing for regulatory audits and maintaining continuous secure operations.

This guide provides expert architectural patterns for implementing robust authentication using Clerk in Next.js 14/15 App Router. It covers essential setups like ClerkProvider, middleware route protection (including role/permission checks), and accessing user data in Server Components and Server Actions. Ideal for building secure, scalable, and enterprise-grade web applications.

Learn how to configure and implement robust backend endpoints to handle webhooks from Clerk. This guide covers processing user lifecycle events (creation, update, deletion) and organization events, ensuring seamless data synchronization to your external database. It emphasizes secure practices like Svix signature verification and idempotency protection.

A comprehensive guide to implementing best practices for security within Databricks. Learn how to manage secrets using scoped storage, enforce the principle of least privilege via Unity Catalog grants, audit API tokens, and apply advanced data protection techniques like column-level masking and row-level security for enhanced data governance and compliance.

This expert tool automates compliance checks for EU GDPR and German DSGVO. It scans codebases for privacy risks (PII, special data), generates formal Data Protection Impact Assessments (DPIA), and manages the entire lifecycle of Data Subject Access Requests (DSARs), ensuring adherence to strict legal deadlines. Ideal for privacy audits and compliance planning.

Generates and implements backup strategies for databases and applications, producing configuration files and automation scripts that ensure secure, scalable protection and disaster recovery readiness across platforms.

This guide provides comprehensive security best practices for integrating with the Juicebox API. It covers critical areas such as secure API key management (using secrets managers), robust webhook signature verification, input validation using schemas, and essential data protection techniques like PII redaction. It ensures compliance with global regulations like GDPR and CCPA when handling sensitive professional and contact data.

A specialized security auditor for Laravel applications. It analyzes code, APIs, and configurations against OWASP standards to detect vulnerabilities such as XSS, IDOR, SQL injection, and misconfigurations. Ideal for reviewing backend logic to ensure robust data protection and authorization.

This skill provides comprehensive patterns for handling sensitive data when integrating with Mistral AI. It covers PII redaction (emails, phone numbers, etc.), implementing data retention policies, and enforcing compliance with global privacy regulations like GDPR and CCPA. Key features include safe API wrappers, dataset sanitization for fine-tuning, and conversation history management with TTL and user erasure rights.

This expert specializes in secure mobile development practices, covering areas like input validation, WebView security, secure data storage (KeyStore/Keychain), and advanced network security (Certificate Pinning). Use this skill to write secure, resilient mobile code for both iOS and Android, mitigating platform-specific vulnerabilities and ensuring sensitive data protection.

This skill provides comprehensive guidance on achieving PCI DSS (Payment Card Industry Data Security Standard) compliance. It covers best practices for designing, implementing, and auditing secure payment processing systems, including network protection, data encryption, tokenization, and adhering to strict data minimization policies.

This guide provides robust, production-ready strategies for integrating with the PostHog API. It teaches developers how to handle API rate limits (429 errors) gracefully using exponential backoff and retry logic. Furthermore, it covers implementing request queuing for burst protection, optimizing with data caching, and monitoring rate limit headers, ensuring stable and reliable data ingestion regardless of traffic volume.