Skill UI

An expert tool for generating comprehensive C4 Code-level documentation. It analyzes existing code directories to automatically extract and document critical architectural details, including function signatures, class definitions, method dependencies, and internal data flows. It supports generating various Mermaid diagrams (classDiagram, flowchart) to visualize complex system components, ensuring accurate and maintainable technical documentation.

Scans Cairo/StarkNet smart contracts for six critical issues spanning felt252 arithmetic, messaging, access control, and signature replay, reporting severity and fixes to support audits, bridge reviews, and pre-launch security checks.

This guide details security best practices for integrating with Clay. It covers securing API keys, validating webhook signatures, isolating provider credentials, and redacting sensitive PII data. Essential for maintaining compliance and data integrity in production environments.

A comprehensive guide and implementation framework for managing real-time data flow using Clay's event-driven architecture. This skill covers both inbound webhooks (POSTing data into Clay tables) and outbound HTTP API callbacks (receiving enriched data from Clay). It provides production-ready TypeScript code for setup, signature verification, and idempotent processing, enabling robust, event-driven integrations.

This comprehensive guide outlines essential, production-grade security best practices for implementing Clerk authentication. It covers securing environment variables, hardening middleware with crucial security headers (like CSP, X-Frame-Options), protecting API routes with granular authorization checks, and verifying webhooks using signature validation (svix). Use this when deploying or auditing an application to ensure maximum security posture.

Learn how to configure and implement robust backend endpoints to handle webhooks from Clerk. This guide covers processing user lifecycle events (creation, update, deletion) and organization events, ensuring seamless data synchronization to your external database. It emphasizes secure practices like Svix signature verification and idempotency protection.

This comprehensive guide details how to implement robust webhook endpoints for CodeRabbit, an AI-powered code review tool. It covers essential security practices, including signature validation (HMAC-SHA256), and provides structured methods for handling various event types (e.g., PR reviews, check run completions, comments). Use this skill when integrating CodeRabbit into CI/CD pipelines to automate notifications, track metrics, and enforce quality gates.

Builds robust and secure webhook receiver endpoints capable of handling events from external services (e.g., Stripe, GitHub). Key features include HMAC signature verification, idempotency checking, and asynchronous queue processing to prevent timeouts and ensure reliable event ingestion.

This comprehensive guide details essential security best practices for integrating with Customer.io. It covers secure credential storage using secrets managers, sanitizing Personally Identifiable Information (PII) via hashing, verifying webhook signatures (HMAC-SHA256) to ensure data integrity, and establishing procedures for API key rotation to maintain compliance with GDPR/CCPA regulations.

A robust solution for implementing and handling real-time webhooks from Customer.io. This tool processes critical marketing events, including delivery status, opens, clicks, bounces, and unsubscribes. Key features include HMAC signature verification for security, reliable asynchronous event processing, and structured routing to manage various customer interactions, allowing data to be streamed efficiently to a data warehouse or CRM.

This guide implements Deepgram's callback and webhook mechanism for handling asynchronous audio transcription. It provides a complete workflow, including submitting audio for background processing, setting up a secure webhook endpoint (with HMAC signature verification), and managing job status using Redis. Essential for integrating robust, delayed voice processing results into a production backend system.

This workflow guides the complete process of generating legal documents using the Documenso API. It covers creating document shells, uploading PDFs, defining multiple recipient roles (Signer, Approver, Viewer), setting specific signing orders, and strategically placing various interactive fields (Signature, Date, Text) across multiple pages. It is ideal for building complex, multi-party agreement workflows and managing the entire document lifecycle.