Development skills

Security guidelines for writing code and reviewing it for vulnerabilities such as SQL injection.

Security guidelines for LLM applications, based on the OWASP Top 10 for LLM 2025.

Runs Semgrep static analysis scans and writes custom detection rules.

Works with Langfuse and its documentation: tracing, monitoring, datasets, experiments and evaluation of AI applications.

Finds and fixes issues reported in Sentry through its MCP server, analysing stack traces, breadcrumbs and traces.

Sets up the Sentry SDK in a Next.js app: error monitoring, tracing, session replay, logging and profiling.

Sets up the Sentry SDK for Node.js, Bun and Deno: error monitoring, tracing, profiling and logging.

Sets up the Sentry SDK in a Python app: error monitoring, tracing, profiling, logging, metrics and crons.

Sets up the Sentry SDK in a React app: error monitoring, tracing, session replay, profiling and logging.

Sets up Sentry in any language or framework by detecting the platform and loading the matching SDK skill.

Sets up Sentry AI Agent Monitoring to track LLM calls, agents and conversations across the common AI SDKs.

Creates Sentry alerts through the workflow engine API, with notifications to email, Slack, PagerDuty and Discord.

Guides building Medusa Admin dashboard UI: widgets, custom pages, forms, tables and data loading.

Guides building Medusa storefront features: custom API routes, SDK integration and React Query patterns.

Guides Medusa backend work: custom modules, API routes, workflows, data models and module links.

Configures the Better Auth server and client: database adapters, sessions, plugins and environment variables.

Scaffolds authentication with Better Auth: detects the framework, configures the database adapter, adds OAuth providers and builds auth pages.

Sets up Better Auth email and password sign-in: email verification, password reset flows, password policies and hashing.

Configures multi-tenant organisations in Better Auth: members, invitations, custom roles, teams and RBAC.

Adds two-factor authentication with Better Auth: TOTP apps, OTP codes by email or SMS, backup codes and trusted devices.

Secures a Better Auth setup: rate limiting, CSRF protection, trusted origins, cookie and session security, token encryption and audit logs.

Covers email deliverability and compliance: SPF, DKIM, DMARC, bounce handling, CAN-SPAM, GDPR and webhooks.

Builds HTML email templates from React components with React Email and sends them with Resend.

Operates Resend from the terminal: send emails and manage domains, contacts, broadcasts, templates and webhooks.