Skill UI

A comprehensive guide detailing security best practices for Deepgram API integration. It covers critical topics such as implementing scoped API keys, key rotation strategies, enabling built-in PII redaction for sensitive data, generating temporary client-side keys, and validating audio URLs to prevent SSRF attacks. Use this when building robust, production-grade applications requiring high data security and compliance.

This skill functions as a specialized dependency security expert. It analyzes project dependencies to identify critical security vulnerabilities, licensing compliance issues, and outdated packages. It provides comprehensive, actionable remediation strategies to strengthen supply chain security.

Performs security-focused differential review of PRs, commits, and diffs, adapting depth to repo size, tracing git history, estimating blast radius, checking coverage, and producing detailed markdown reports to stop regressions.

Collects Docker build, compose, and runtime tips including multi-stage builds, isolated dependencies, compose healthchecks, .dockerignore, image analysis, and security anti-patterns to streamline container pipelines.

This expert provides advanced, practical knowledge across the entire lifecycle of containerized applications. Core expertise includes multi-stage Dockerfile optimization, container security hardening (non-root users, minimal attack surface), and advanced orchestration using patterns like Docker Compose. Ideal for ensuring robust, secure, and production-ready deployments.

A comprehensive guide to building, optimizing, and deploying production-grade Docker images and containers. Covers advanced concepts such as multi-stage builds, layer caching optimization, security hardening (non-root users, secrets), health checks, and effective volume/network configuration using docker-compose.

A comprehensive guide detailing essential security best practices for integrating with Documenso document signing. Covers critical topics such as secure API key management (using environment variables), robust webhook secret verification (preventing timing attacks), implementing least privilege document access control, and setting up secure self-hosted signing certificates and secrets.

Offers an automated Env Secret Detector assistant in the Security Fundamentals domain, providing guidance, patterns, validations, and ready-to-use code for detecting and preventing exposed secrets.

This guide provides comprehensive best practices for securing Evernote API integrations. It covers essential topics like secure credential management using environment variables or vaults, implementing CSRF-protected OAuth flows, encrypting access tokens at rest using AES-256-GCM, rigorous input validation, and ensuring secure logging practices by redacting sensitive data. Use this when hardening your application against data breaches.

A comprehensive guide and implementation pattern for enforcing granular Role-Based Access Control (RBAC) on the Exa search API in multi-tenant or enterprise environments. This skill demonstrates how to implement API key scoping, restrict search domains by role, enforce maximum result limits, and track daily usage to ensure robust data governance and security.

This comprehensive guide details essential security practices for integrating the Exa API. It covers key areas such as secure API key management using environment variables, implementing content moderation to filter unsafe results, restricting results via domain allow/block lists, and sanitizing user queries to prevent injection attacks. Use this when hardening or auditing an Exa-powered application.

Performs authorized file path traversal assessments to map web inputs, craft traversal payloads, and document sensitive files that can be read, aiding defenders in hardening filesystem handling during security reviews.