Use when adding, fixing, or reviewing SAML login, SSO, SP metadata, ACS, SLO, session auth gates, or myKaarma IdP integration in a Python web app.
Use when creating a new local app, prototype, browser tool, game, demo, or greenfield project, especially when no existing repo stack is already fixed.
Design and review REST APIs following myKaarma organization standards. Use when designing new API endpoints, reviewing API changes, or ensuring API consistency across services. Covers URL patterns, HTTP methods, status codes, versioning, naming conventions, pagination, and bulk operations.
Use when reviewing code, UI screens, or features for localization compliance against myKaarma's attribute-based rendering standards. Triggers on requests like "check localization", "audit i18n", "review RTL support", or "is this locale-ready".
Deep code security audit for Java/Spring Boot and TypeScript services. Covers auth/authz, input validation, SQL injection, PII exposure, and API security. Use when preparing for a security review, before a major release, or when a security concern is raised. Also trigger when the user says things like "audit this service for security", "security review before release", "check for vulnerabilities in the code", "is this endpoint secure?", "check for SQL injection", "check for PII in logs", or "audit our auth layer". Complements the vuln-scan skill (which covers CVEs and dependency scanning) — this skill focuses on application-level code patterns.
Use when reviewing PM-built prototypes, wireframes, Figma mockups, or UI screens for usability gaps, UX issues, and UI quality. Triggers on requests like "review this design", "audit this prototype", "UX feedback", or "check this UI".
Applies myKaarma's official brand colors, typography, spacing, navigation patterns, dark mode, and interaction design to all UI output. Invoke this skill before starting any UI project — components, dashboards, forms, or AI-generated artifacts — to ensure full consistency with myKaarma's visual identity and design system.
Implement production-ready features for high-reliability systems following industry best practices. Use when building APIs, services, background workers, data pipelines, or user-facing features where performance and maintainability are critical. Covers backend, frontend, security, observability, and deployment.