Skill UI

A comprehensive guide detailing reference architecture patterns for implementing Clerk authentication in modern, enterprise-grade applications. Covers best practices for Next.js full-stack, microservices, multi-tenant SaaS, and cross-platform mobile/web synchronization, ensuring secure and scalable authentication flows.

This comprehensive guide outlines essential, production-grade security best practices for implementing Clerk authentication. It covers securing environment variables, hardening middleware with crucial security headers (like CSP, X-Frame-Options), protecting API routes with granular authorization checks, and verifying webhooks using signature validation (svix). Use this when deploying or auditing an application to ensure maximum security posture.

Learn how to configure and implement robust backend endpoints to handle webhooks from Clerk. This guide covers processing user lifecycle events (creation, update, deletion) and organization events, ensuring seamless data synchronization to your external database. It emphasizes secure practices like Svix signature verification and idempotency protection.

Conduct comprehensive, offensive security assessments across major cloud environments, including Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP). This skill simulates real-world attacks, covering reconnaissance, authentication bypass, resource enumeration, privilege escalation, and data extraction to identify critical misconfigurations and vulnerabilities in cloud infrastructure.

Automate Cloudinary media workflows—folder creation, upload preset configuration, asset lookup, transformation generation, usage monitoring, and webhook setup—via natural-language commands routed through the Rube MCP server.

Walks through broken authentication assessments by analyzing login flows, password policies, brute-force/credential-stuffing, and session/token security to document vulnerabilities and mitigation steps for web applications.

Guides analysts through assessing web authentication, credential stuffing, password policies, session tokens, and fixation flows to uncover broken authentication risks before attackers do.

Master the complete lifecycle of building professional, cross-browser browser extensions for Chrome and Firefox. This expertise covers modern extension architecture, implementing Manifest V3 (MV3), developing content scripts, service workers, and popup UIs. Furthermore, it includes strategies for extension monetization and successful publishing on the Chrome Web Store, ensuring the built tool solves real-world user problems.

Run comprehensive web application security assessments through Burp Suite’s proxy, repeater, and scanner features to intercept, modify, and analyze HTTP traffic while spotting vulnerabilities for remediation planning.

Guides intercepting HTTP traffic, modifying requests, using Repeater, defining scope, and running Burp Suite scans for systematic web application security testing.

A comprehensive guide for designing production-grade lead enrichment pipelines in Clay. Covers three integration patterns (Webhook, API), detailed table schema design, advanced data waterfall logic, implementing complex ICP scoring formulas, and setting up robust CRM synchronization flows for go-to-market data operations.

Collects comprehensive diagnostic evidence for troubleshooting CodeRabbit integration issues. This bundle checks the App installation status, validates the `.coderabbit.yaml` configuration, reviews recent PR history, and verifies GitHub webhook deliveries. Essential for preparing support tickets and diagnosing complex SaaS integration failures.