Skill UI

Master the art of building robust, production-grade LLM chains using LangChain Expression Language (LCEL). This guide covers advanced composition patterns, including sequential, parallel, and conditional branching chains. It also details prompt templating, structured output parsing (JSON/Zod), and context injection, enabling the creation of complex, multi-step AI pipelines.

A comprehensive checklist for ensuring LangChain applications are robust, secure, and scalable for production environments. It covers critical areas including configuration management, advanced error handling, observability setup (e.g., LangSmith), performance optimization, security best practices (like prompt injection prevention and PII handling), rigorous testing, and zero-downtime deployment strategies. Use this guide when preparing for a major launch or auditing existing LLM systems.

This guide outlines essential security practices for deploying production-grade LLM applications using LangChain. It covers secure secrets management, defending against prompt injection, implementing sandboxed tool execution, validating model outputs for sensitive data, and setting up comprehensive audit logging, ensuring robust and secure AI deployment.

A specialized security auditor for Laravel applications. It analyzes code, APIs, and configurations against OWASP standards to detect vulnerabilities such as XSS, IDOR, SQL injection, and misconfigurations. Ideal for reviewing backend logic to ensure robust data protection and authorization.

Build and configure Laravel 10+ apps using Eloquent models, Sanctum auth, Horizon queues, Livewire interfaces, and REST APIs while ensuring PSR-12, dependency injection, eager loading, and Pest/PHPUnit coverage above 85%.

A comprehensive guide detailing essential security measures for integrating Mistral AI models. Covers API key management, defending against prompt injection, implementing content moderation, sanitizing outputs, and secure logging practices, ensuring robust and safe application development.

Enables Claude to run a security-focused code review via the security-agent plugin, flagging SQL injection, XSS, authentication flaws, and unsafe dependencies with severity, location, impact, and remediation guidance for requested audits.

Automates vulnerability scans for applications and APIs via the security-test-scanner plugin, covering OWASP Top 10, SQL injection, XSS, CSRF, authentication, and authorization weaknesses while generating detailed remediation reports.

Expert skill for building robust, enterprise-grade PHP applications using modern features (PHP 8.3+), major frameworks (Laravel, Symfony), and strict architectural patterns. Specializes in implementing typed DTOs, value objects, dependency injection, and ensuring high test coverage for secure REST/GraphQL APIs.

This skill performs deep, line-by-line scanning of an entire codebase to understand its architecture, patterns, and dependencies. It systematically identifies critical issues across security vulnerabilities (SQL injection, secrets), performance bottlenecks (N+1 queries, caching), architectural flaws, and code quality gaps. It then automatically refactors and fixes all identified issues, transforming the code into professional, production-grade, enterprise-level quality.

Meta’s Prompt Guard is an 86M-parameter classifier that spots prompt injections and jailbreak attempts before they reach LLMs, filtering user input, third-party data, or RAG documents with multilingual support and sub-2ms latency for fast deployments.

A comprehensive guide detailing security best practices for building and deploying applications on the Replit platform. Learn how to properly manage sensitive data using Replit Secrets (AES-256 encryption), implement secure service-to-service authentication via REPL_IDENTITY tokens, validate custom headers, and prevent common vulnerabilities like hardcoded API keys and SQL injection. Essential for auditing and securing production environments.