Skill UI

This guide provides comprehensive patterns for designing and implementing secure multi-tenant SaaS applications using shared databases. It covers critical techniques like Row-Level Security (RLS) in PostgreSQL, implementing tenant-aware middleware in TypeScript (Express/Fastify), and enforcing data scoping at the ORM level (Prisma/Drizzle). Learn how to prevent data leakage and manage tenant isolation across shared schemas.

This guide outlines the implementation of Remote Browser Isolation (RBI) as a core component of a Zero Trust architecture. It details policies for URL risk classification, Data Loss Prevention (DLP) controls, and Content Disarm and Reconstruction (CDR). This is essential for hardening web access, protecting against zero-day exploits, phishing, and preventing data exfiltration from untrusted web content.

This guide provides comprehensive best practices for writing robust and effective unit tests using JUnit 5 in Java. It covers standard test structures (Arrange-Act-Assert), advanced data-driven testing using parameterized methods, best assertion practices (including AssertJ), and dependency isolation using mocking frameworks like Mockito. Ideal for developers aiming to improve code coverage and test reliability.

A comprehensive methodology for pinpointing the root cause of complex bugs, regressions, or unexpected behavior in large codebases. Techniques include binary search debugging, Git bisect for tracking regressions across commits, strategic data/control flow logging, component isolation, and advanced breakpoint strategies (conditional breakpoints, watch expressions). Ideal for scenarios where the bug source is unclear or difficult to reproduce.

This guide details the operational workflow for namespace-scoped tenants within KubeSphere DevOps. It outlines how users without cluster-admin privileges can securely perform DevOps operations by strictly utilizing KubeSphere's dedicated APIs (`/kapis/`) and authenticating via OAuth tokens, ensuring strict resource isolation and access control within their designated namespace.

This specialized skill automates the process of converting visual designs (from Stitch) into high-quality, modular React and Vite components. It adheres to modern frontend best practices, enforcing logic isolation via custom hooks, data decoupling using mock data files, and ensuring type safety with TypeScript interfaces. The workflow includes automated asset fetching, style mapping (Tailwind), and rigorous validation cycles to produce production-ready, maintainable code.

Provides technology-agnostic guidance for architecting and reviewing modular systems. This skill covers core architectural principles such as bounded contexts, state isolation, explicit contracts, and failure containment. Use it when determining service boundaries, assessing coupling between domains, or designing new greenfield architectures without assuming a specific framework, language, or repository structure.

This guide demonstrates how to implement robust Role-Based Access Control (RBAC) for Algolia Enterprise environments. It covers defining granular permissions using ACLs, generating Secured API Keys for strict multi-tenant data isolation, and building middleware to validate service permissions, ensuring the principle of least privilege in large-scale applications.

Provides comprehensive security guidelines for integrating Anthropic Claude API. Covers essential best practices including secure API key management (rotation, isolation), defending against prompt injection attacks by separating system instructions from user input, robust input sanitization, and output validation to prevent accidental data leakage. Essential for building production-grade, secure AI applications.

This utility provides a structured way to manage and separate notes across multiple accounts and environments within Apple Notes. By utilizing distinct accounts (e.g., iCloud for Production, 'On My Mac' for Development), users can ensure absolute data isolation between development, staging, and live production data. It is crucial for maintaining clean separation in complex development workflows and QA testing scenarios.

A comprehensive guide detailing how to securely configure and manage Canva Connect API integrations across development, staging, and production environments. This resource covers environment strategy, best practices for OAuth credential management, secret handling (AWS, GCP, Vault), and implementing environment isolation guards to ensure secure and scalable deployments.

Implements a robust, multi-tenant authorization layer for Cohere API v2. This solution enforces Role-Based Access Control (RBAC), manages individual API keys per team, and implements per-team usage limits and daily budget tracking. It is essential for large-scale applications requiring strict resource isolation and cost governance across multiple internal services.