Skill UI

This comprehensive skill provides best practices for secure coding across multiple domains. It guides developers on managing secrets, validating user input, preventing SQL injection, implementing robust authentication and authorization (including RLS), and mitigating XSS attacks. Use this when handling sensitive data, APIs, or user-generated content to ensure the highest level of security.

Secure AI coding agents with permission boundaries, secret protection, code review gates, and safe sandbox configurations for team environments. Covers Claude Code, Cursor, Copilot, and Codex security implementations including CLAUDE.md configuration, command allowlists, filesystem access controls, and pre-commit hooks for secret scanning.

This skill empowers you to implement secure backend coding practices, focusing on input validation, authentication, and API security. It covers vulnerability prevention, defensive programming, and secure architecture implementation. Ideal for building security-first applications that resist common attack vectors like SQL injection, XSS, and CSRF. Includes expertise in database protection, secret management, and HTTP security headers.

Runs GitHub Copilot CLI programmatically for repository analysis and coding tasks, with non-interactive prompts, JSONL output parsing, and secure tool permissions.

This skill automates Kimi Code execution in non-interactive mode within a bounded repository. It parses event streams, handles authentication securely, and manages sandbox permissions. Use it to delegate specific coding tasks to Kimi Code while ensuring safety constraints like timeouts and directory limits. It prevents interactive UI launches and avoids credential exposure.

Context Kit is an external framework designed to organize and manage personal, durable context data (like identity details, memories, and domain knowledge) into secure Markdown artifacts. It helps users set up robust knowledge bases for coding agents (e.g., Claude Code), guiding them on best practices for data privacy, local storage, and safe integration, while preventing sensitive data leaks.

CRED-OMEGA serves as an enterprise operational CISO engine for comprehensive credential and secret management. It integrates with AI coding tools to secure API keys and vaults. Use this skill for specialized security tasks involving credential governance, secret handling, and enterprise security compliance. Avoid for general assistance or when simpler tools are available.

Expert in secure frontend coding practices specializing in XSS prevention, output sanitization, and client-side security patterns. Provides guidance on CSP configuration, safe DOM manipulation, input validation, clickjacking protection, and secure redirects.

This skill specializes in secure mobile application development, focusing on input validation, WebView security, and mobile-specific security patterns. It covers secure data storage, authentication implementation, and platform-specific vulnerabilities for iOS and Android. Ideal for building security-first mobile apps that protect sensitive data against common attack vectors like injection and man-in-the-middle attacks.