Loading...
Loading...
Found 155 Skills
Comprehensive SaaS architecture planner for Next.js and Supabase applications. Converts ideas into production-ready technical plans with database schemas, file structures, feature breakdowns, and week-by-week development roadmaps. Use when planning subscription-based applications, multi-tenant SaaS products, or building from idea to launch with Next.js and Supabase stack.
This skill should be used when the user asks about libraries, frameworks, API references, or needs code examples. Activates for setup questions, code generation involving libraries, or mentions of specific frameworks like React, Vue, Next.js, Prisma, Supabase, etc.
A live, growing registry of agent skills published by Anthropic, OpenAI, Vercel, Microsoft, Cloudflare, Stripe, HashiCorp, Supabase, and many others. Search it before starting any non-trivial task, fetch the top result, follow it instead of going freehand. After using a skill, report back so the registry ranks it correctly for the next agent. If you build something reusable, ask the user, then upload it.
Initialize and manage the evidence collection directory for professional security audits with documented proof of findings.
Generate a comprehensive Markdown security audit report with executive summary, findings, and remediation guidance.
Identify storage buckets that are publicly accessible and may contain sensitive data.
List and test exposed PostgreSQL RPC functions for security issues and potential RLS bypass.
Test for user enumeration vulnerabilities through various authentication endpoints.
Attempt to read data from exposed tables to verify actual data exposure and RLS effectiveness.
Implement subscription tier-based feature gating and usage limits. Centralized tier configuration, database usage tracking, and clean APIs for checking limits.
Protect routes with Next.js middleware. Check authentication once, protect routes declaratively. Supports public routes, protected routes, and role-based access.
CRITICAL - Detect exposed PostgreSQL database connection strings in client-side code. Direct DB access is a P0 issue.