web-api

Authentic Mexican cooking expert covering moles, salsas, tacos, and regional Mexican dishes

Implement and validate FastAPI authentication strategies including JWT tokens, OAuth2 password flows, OAuth2 scopes for permissions, and Supabase inte...

Implement comprehensive API error handling with standardized error responses, logging, monitoring, and user-friendly messages. Use when building resil...

Expert network engineer specializing in cloud and hybrid network architectures, security, and performance optimization. Masters network design, troubl...

Integrate markdownlint into development workflows including CLI usage, programmatic API, CI/CD pipelines, and editor integration.

Test authenticated routes in the your project using cookie-based authentication. Use this skill when testing API endpoints, validating route functiona...

This skill should be used when the user asks to "create a hook", "add a PreToolUse/PostToolUse/Stop hook", "validate tool use", "implement prompt-base...

Use when starting any conversation - establishes how to find and use skills, requiring Skill tool invocation before ANY response including clarifying ...

Use when working with Payload CMS projects (payload.config.ts, collections, fields, hooks, access control, Payload API). Use when debugging validation...

Comprehensive Flow Nexus platform management - authentication, sandboxes, app deployment, payments, and challenges

AI-assisted pair programming with multiple modes (driver/navigator/switch), real-time verification, quality monitoring, and comprehensive testing. Sup...

Master REST and GraphQL API design principles to build intuitive, scalable, and maintainable APIs that delight developers. Use when designing new APIs...

Build comprehensive attack trees to visualize threat paths. Use when mapping attack scenarios, identifying defense gaps, or communicating security ris...

Master authentication and authorization patterns including JWT, OAuth2, session management, and RBAC to build secure, scalable access control systems....

Design multi-stage CI/CD pipelines with approval gates, security checks, and deployment orchestration. Use when architecting deployment workflows, set...

Implement distributed tracing with Jaeger and Tempo to track requests across microservices and identify performance bottlenecks. Use when debugging mi...

Create production-ready FastAPI projects with async patterns, dependency injection, and comprehensive error handling. Use when building new FastAPI ap...

Build production-ready Node.js backend services with Express/Fastify, implementing middleware patterns, error handling, authentication, database integ...

Generate and maintain OpenAPI 3.1 specifications from code, design-first specs, and validation patterns. Use when creating API documentation, generati...

Implement PCI DSS compliance requirements for secure handling of payment card data and payment systems. Use when securing payment processing, achievin...

Write effective blameless postmortems with root cause analysis, timelines, and action items. Use when conducting incident reviews, writing postmortem ...

Configure Static Application Security Testing (SAST) tools for automated vulnerability detection in application code. Use when setting up security sca...

Derive security requirements from threat models and business context. Use when translating threats into actionable requirements, creating security use...

Master smart contract security best practices to prevent common vulnerabilities and implement secure Solidity patterns. Use when writing smart contrac...

Apply STRIDE methodology to systematically identify threats. Use when analyzing system security, conducting threat modeling sessions, or creating secu...

Map identified threats to appropriate security controls and mitigations. Use when prioritizing security investments, creating remediation plans, or va...

This skill should be used when writing Ruby gems following Andrew Kane's proven patterns and philosophy. It applies when creating new Ruby gems, refac...

This skill should be used when writing Ruby and Rails code in DHH's distinctive 37signals style. It applies when writing Ruby code, Rails applications...

This skill should be used when writing Ruby and Rails code in DHH's distinctive 37signals style. It applies when writing Ruby code, Rails applications...

This skill should be used when generating and editing images using the Gemini API (Nano Banana Pro). It applies when creating images from text prompts...

Audit an Anthropic Cookbook notebook based on a rubric. Use whenever a notebook review or audit is requested.

Comprehensive code reviews for Bitwarden Android. Detects change type (dependency update, bug fix, feature, UI, refactoring, infrastructure) and appli...

Interactive Archon integration for knowledge base and project management via REST API. On first use, asks for Archon host URL. Use when searching docu...

Fetch unresolved PR review comments using GitHub GraphQL API, filtering out resolved and outdated feedback.

Creating algorithmic art using p5.js with seeded randomness and interactive parameter exploration. Use this when users request creating art using code...

Convert PyTorch AT_DISPATCH macros to AT_DISPATCH_V2 format in ATen C++ code. Use when porting AT_DISPATCH_ALL_TYPES_AND*, AT_DISPATCH_FLOATING_TYPES*...

Write Ruby gems following Andrew Kane's proven patterns and philosophy. Use when creating new Ruby gems, refactoring existing gems, designing gem APIs...

Write Ruby and Rails code in DHH's distinctive 37signals style. Use this skill when writing Ruby code, Rails applications, creating models, controller...

Generate and edit images using the Gemini API (Nano Banana Pro). Use this skill when creating images from text prompts, editing existing images, apply...

Interactive Product Owner skill for requirements gathering, analysis, and PRD generation. Triggers when users request product requirements, feature sp...

This skill should be used when users need to generate detailed, structured prompts for creating UI/UX prototypes. Trigger when users request help with...

Best practices for building Stripe integrations. Use when implementing payment processing, checkout flows, subscriptions, webhooks, Connect platforms,...

Reply to and resolve GitHub PR review comments using the GitHub CLI and GraphQL API.

═══════════════════════════════════════════════════════════🚨 MANDATORY RESPONSE FORMAT - USE FOR EVERY RESPONSE══════════════════════════════════════...

Skill creation and validation framework ensuring compliance with PAI architectural standards.USE WHEN user says "create skill", "create a skill", "new...

Generate or edit images using Google Gemini API via nanobanana. Use when the user asks to create, generate, edit images with nanobanana, or mentions i...

Generate and edit images using the Gemini API (Nano Banana). Use this skill when creating images from text prompts, editing existing images, applying ...

Expert research tool for Google Calendar API implementations. PROACTIVELY use when (1) reviewing PRs adding calendar features, (2) planning new event/...

Expert research tool for Model Context Protocol implementations. PROACTIVELY use when reviewing MCP server code, planning new MCP tools/resources/prom...

Analyze dependencies for known security vulnerabilities and outdated versions. Use when auditing third-party libraries. Trigger with 'check dependenci...

Analyze network latency and optimize request patterns for faster communication. Use when diagnosing slow network performance or optimizing API calls. ...

Analyze HTTP security headers of web domains to identify vulnerabilities and misconfigurations.Use when you need to audit website security headers, as...

Analyze and optimize system throughput including request handling, data processing, and resource utilization. Use when identifying capacity limits or ...

Automate SOC 2 audit preparation including evidence gathering, control assessment, and compliance gap identification.Use when you need to prepare for ...

Audit access control implementations for security vulnerabilities and misconfigurations. Use when reviewing authentication and authorization. Trigger ...

Review crypto wallet security including private key management and transaction signing.Use when auditing wallet security practices.Trigger with phrase...

Automate API endpoint testing including request generation, validation, and comprehensive test coverage for REST and GraphQL APIs.Use when testing API...

Build secure API authentication systems with OAuth2, JWT, API keys, and session management.Use when implementing secure authentication flows.Trigger w...

Create API gateways with routing, load balancing, rate limiting, and authentication.Use when routing and managing multiple API services.Trigger with p...

Build production-ready GraphQL servers with schema design, resolvers, and subscriptions.Use when building GraphQL APIs with schemas and resolvers.Trig...

Build scalable WebSocket servers for real-time bidirectional communication.Use when enabling real-time bidirectional communication.Trigger with phrase...

Check HIPAA compliance for healthcare data security requirements. Use when auditing healthcare applications. Trigger with 'check HIPAA compliance', 'v...

Check compliance with OWASP Top 10 security risks and best practices. Use when performing comprehensive security audits. Trigger with 'check OWASP com...

Analyze session management implementations to identify security vulnerabilities in web applications.Use when you need to audit session handling, check...

Build event-driven APIs with webhooks, Server-Sent Events, and real-time notifications.Use when building event-driven API architectures.Trigger with p...

Validate encryption implementations and cryptographic practices. Use when reviewing data security measures. Trigger with 'check encryption', 'validate...

Perform API fuzzing to discover edge cases, crashes, and security vulnerabilities.Use when performing specialized testing.Trigger with phrases like "f...

Generate API contracts and OpenAPI specifications from code or design documents.Use when documenting API contracts and specifications.Trigger with phr...

Create comprehensive API documentation with examples, authentication guides, and SDKs.Use when creating comprehensive API documentation.Trigger with p...

Generate client SDKs in multiple languages from OpenAPI specifications.Use when generating client libraries for API consumption.Trigger with phrases l...

Generate comprehensive compliance reports for security standards. Use when creating compliance documentation. Trigger with 'generate compliance report...

Generate gRPC service definitions, stubs, and implementations from Protocol Buffers.Use when creating high-performance gRPC services.Trigger with phra...

Generate complete REST API implementations from OpenAPI specifications or database schemas.Use when generating RESTful API implementations.Trigger wit...

Generate comprehensive security audit reports for applications and systems.Use when you need to assess security posture, identify vulnerabilities, eva...

Implement standardized error handling with proper HTTP status codes and error responses.Use when implementing standardized error handling.Trigger with...

Execute comprehensive load and stress testing to validate API performance and scalability.Use when validating API performance under load.Trigger with ...

Monitor and log API requests with correlation IDs, performance metrics, and security audit trails.Use when auditing API requests and responses.Trigger...

Implement intelligent API response caching with Redis, Memcached, and CDN integration.Use when optimizing API performance with caching.Trigger with ph...

Implement API migrations between versions, platforms, or frameworks with minimal downtime.Use when upgrading APIs between versions.Trigger with phrase...

Generate mock API servers for testing and development with realistic response data.Use when creating mock APIs for development and testing.Trigger wit...

Build real-time API monitoring dashboards with metrics, alerts, and health checks.Use when tracking API health and performance metrics.Trigger with ph...

Monitor cross-chain bridge security, liquidity, and transaction status across networks.Use when monitoring cross-chain asset transfers.Trigger with ph...

Perform security penetration testing to identify vulnerabilities. Use when conducting security assessments. Trigger with 'run pentest', 'security test...

Analyze code, infrastructure, and configurations by conducting comprehensive security audits. It leverages tools within the security-pro-pack plugin, ...

This skill enables AI assistant to conduct a security-focused code review using the security-agent plugin. it analyzes code for potential vulnerabilit...

Automate security vulnerability testing covering OWASP Top 10, SQL injection, XSS, CSRF, and authentication issues.Use when performing security assess...

Optimize bulk API requests with batching, throttling, and parallel execution.Use when processing bulk API operations efficiently.Trigger with phrases ...

Implement sophisticated rate limiting with sliding windows, token buckets, and quotas.Use when protecting APIs from excessive requests.Trigger with ph...

Analyze and guide security incident response, investigation, and remediation processes.Use when you need to handle security breaches, classify inciden...

Detect API security vulnerabilities including injection, broken auth, and data exposure.Use when scanning APIs for security vulnerabilities.Trigger wi...

Use when you need to work with security and compliance.This skill provides security scanning and vulnerability detection with comprehensive guidance a...

Use when you need to work with security and compliance.This skill provides security scanning and vulnerability detection with comprehensive guidance a...

Detect exposed secrets, API keys, and credentials in code. Use when auditing for secret leaks. Trigger with 'scan for secrets', 'find exposed keys', o...

This skill enables comprehensive vulnerability scanning using the vulnerability-scanner plugin. it identifies security vulnerabilities in code, depend...

This skill automates the setup of distributed tracing for microservices. it helps developers implement end-to-end request visibility by configuring co...

Use when setting up log aggregation solutions using ELK, Loki, or Splunk. Trigger with phrases like "setup log aggregation", "deploy ELK stack", "conf...

Setup synthetic monitoring for proactive performance tracking including uptime checks, transaction monitoring, and API health. Use when implementing a...

Analyzes existing plugins to extract their capabilities, then adapts and applies those skills to the current task. Acts as a universal skill chameleon...

Implement API throttling policies to protect backend services from overload.Use when controlling API request rates.Trigger with phrases like "throttle...

Track and optimize application response times across API endpoints, database queries, and service calls. Use when monitoring performance or identifyin...