Skill UI

Performs a structured, multi-phase audit on local branch changes (diffs) to identify security vulnerabilities, bugs, and code quality issues. It systematically checks for common risks like Injection (SQL, XSS), Broken Authentication, IDOR, CSRF, and business logic flaws, providing detailed severity, evidence, and suggested fixes. Ideal for pre-merge code reviews and security audits.

Automatically assists with generating Firebase security rules, offering best-practice guidance, template configurations, and validation checks tailored for GCP compute, storage, and data workloads.

This guide outlines essential security protocols for integrating Fireflies.ai. It covers best practices for managing sensitive API keys (e.g., environment variables, pre-commit hooks), implementing robust HMAC-SHA256 webhook signature verification in multiple languages (TypeScript, Python), and correctly configuring transcript privacy levels to ensure data confidentiality. Ideal for developers setting up production-ready integrations.

Manages Firebase/Firestore CRUD, queries, batch jobs, and security for applications while extending to A2A agent messaging, MCP server integration, and Cloud Run coordination for advanced workflows.

This skill provides a structured methodology for reviewing code commits intended to fix security vulnerabilities or address audit findings. It ensures that the original root cause is properly resolved, verifies the fix hasn't introduced new bugs or vulnerabilities (regressions), and validates the overall completeness of the remediation effort. Ideal for security-critical code reviews.

This skill provides a robust framework for implementing Role-Based Access Control (RBAC) when integrating with Gamma API in enterprise or multi-tenant environments. Since Gamma's API key is workspace-level, this solution enforces granular, per-user permissions (Guest, Viewer, Editor, Admin) at the application layer. Key components include authorization middleware, multi-tenant isolation logic, usage quota management, and detailed audit logging, ensuring system security and compliance in large-scale deployments.

Validates Vertex AI Agent Engine GitHub Actions workflows, enforcing Workload Identity Federation, least-privilege IAM, OIDC permissions, and security scanning so GCP deployments stay automated and secure.

A comprehensive guide detailing best practices for securing Groq API keys and managing data privacy. It covers critical steps such as using environment variables, implementing secure key rotation procedures, preventing key leaks via pre-commit hooks, and defending against prompt injection attacks for robust application development.

This guide outlines critical security measures for integrating with Guidewire systems, which handle sensitive policyholder PII, claims, and financial data. It covers best practices for implementing OAuth2 JWT authentication, API role scoping, input validation, and sensitive data redaction (PII) to prevent data breaches and meet compliance standards.

Automates hardcoded credential discovery by guiding you through secure coding patterns, validation checks, and remediation strategies tailored to security fundamentals engagements.

Automates IAM policy reviewer workflows within the Security Advanced domain, providing guided best practices, production-ready configurations, and validation so teams can handle compliance and threat modeling requests with confidence.

This guide details best practices for securing Ideogram API integrations. It covers essential steps like using environment variables for key storage, implementing key rotation procedures, establishing server-side proxies to prevent key exposure, and sanitizing prompts to mitigate data leaks. Use this when setting up, maintaining, or auditing API security infrastructure.