Skill UI

Design secure multi-tenant LLM hosting platforms on shared GPU inference infrastructure, covering tenant isolation, per-tenant quotas and rate limits, billing attribution, noisy-neighbor protection, and per-tenant policy controls for vLLM on Kubernetes.

This skill covers core principles for building multiplayer games, including server architecture selection, state synchronization methods, network optimization techniques, security measures like server authority, and matchmaking strategies. It helps developers design robust, secure, and performant online gaming experiences.

Master Node.js development principles for 2025, covering framework selection, architecture design, async patterns, validation, and security. Focuses on decision-making logic rather than code memorization to help build scalable and secure applications effectively.

A governance skill designed to secure AI agent tool calls using advanced authorization policies. It implements Cedar policies to control which tools agents can access and under what conditions. Key features include running in 'Shadow mode' for safe observation, 'Enforce mode' for strict blocking, and generating cryptographically signed Ed25519 receipts to provide an immutable, tamper-evident audit trail for every policy decision.

This guide provides comprehensive patterns for designing and implementing secure multi-tenant SaaS applications using shared databases. It covers critical techniques like Row-Level Security (RLS) in PostgreSQL, implementing tenant-aware middleware in TypeScript (Express/Fastify), and enforcing data scoping at the ORM level (Prisma/Drizzle). Learn how to prevent data leakage and manage tenant isolation across shared schemas.

Identifies error-prone APIs, dangerous configurations, and footgun designs that enable security mistakes. Evaluates whether interfaces are resistant to developer misuse and promotes secure-by-default principles. Helps review API designs, configuration schemas, and cryptographic library ergonomics to prevent vulnerabilities caused by human error or poor design choices.

This comprehensive, zero-trust security auditor scans third-party AI agent skills before installation. It performs a rigorous 6-phase review process, analyzing surface patterns, script integrity, permissions, and supply chain risks. It is designed to detect malicious payloads, credential theft, instruction overrides, and prompt injection attacks, ensuring secure AI development and deployment.

This skill provides comprehensive guidelines for optimizing Postgres database performance and security. It covers query optimization, schema design, connection management, Row-Level Security, and concurrency handling. Use it when writing SQL, reviewing database configurations, or implementing indexes. Based on Supabase best practices to ensure efficient and secure database operations for production environments.

Expert in Terraform and OpenTofu for Infrastructure as Code (IaC). Covers advanced module design, state management, multi-cloud deployments, and CI/CD automation. Ensures secure, scalable, and compliant enterprise infrastructure patterns through policy-as-code and GitOps workflows.

This skill involves conducting threat modeling using the STRIDE methodology to identify potential security threats, assess risks, and design appropriate security controls. It is essential when designing secure systems, making architectural changes, or preparing for security audits. The process includes analyzing data flows, identifying trust boundaries, and mitigating risks related to spoofing, tampering, repudiation, information disclosure, denial of service, and privilege escalation.

This skill specializes in threat modeling methodologies like STRIDE and PASTA for security architecture reviews and risk assessment. It helps identify attack vectors, prioritize security risks, and design mitigation strategies to build secure-by-design systems. Ideal for security audits and system design phases.

Route n8n MCP workflow design, editing, validation, testing, deployment, credential, execution, and debugging tasks to specialist guidance. Use this router at the start of any n8n MCP task to load relevant skills, enforce non-negotiables like skill invocation before actions, validate and verify workflows, and keep secrets secure. Trust live tools and skills over training data.