Skill UI

This module implements comprehensive Role-Based Access Control (RBAC) for multi-tenant LangChain applications. It provides granular permission models for controlling model access, tool execution, and chain invocation. Key features include multi-tenant data isolation in vector stores, enforcing usage quotas (token limits), and integrating middleware for robust security enforcement. Ideal for building secure, scalable, and compliant enterprise LLM systems.

This guide outlines essential security practices for deploying production-grade LLM applications using LangChain. It covers secure secrets management, defending against prompt injection, implementing sandboxed tool execution, validating model outputs for sensitive data, and setting up comprehensive audit logging, ensuring robust and secure AI deployment.

A specialized security auditor for Laravel applications. It analyzes code, APIs, and configurations against OWASP standards to detect vulnerabilities such as XSS, IDOR, SQL injection, and misconfigurations. Ideal for reviewing backend logic to ensure robust data protection and authorization.

This comprehensive checklist guides the deployment of AI agents into a live production environment. It covers critical areas including security best practices (API key management, SSO), robust error handling, monitoring setup, operational runbooks, and compliance adherence (HIPAA, GDPR). Use this when validating an agent for go-live to ensure maximum reliability and stability.

This guide details secure methods for connecting external applications to the Linear API. It covers essential security practices, including secure storage of API keys using environment variables, implementing OAuth 2.0 with PKCE for robust authentication, managing token refresh cycles, and verifying webhook signatures using HMAC-SHA256. Essential for building production-grade, secure integrations.

A comprehensive guide for authorized security assessments, detailing systematic methods to escalate user privileges from low-level access to root control on Linux systems. Techniques covered include comprehensive system enumeration, exploiting kernel vulnerabilities (e.g., dirty pipe), abusing misconfigured sudo permissions (using gtfobins), and exploiting vulnerable SUID binaries.

Implement robust, structured logging for API requests, capturing performance metrics, correlation IDs, and detailed security audit trails. This skill ensures compliance by handling PII redaction and providing comprehensive, JSON-formatted logs suitable for ELK Stack or Loki. Essential for debugging, performance analysis, and maintaining SOC 2 compliance in distributed microservices.

A comprehensive guide detailing security best practices for integrating with Lokalise. Covers strategies for managing API token scopes (read-only vs. read-write), enforcing the principle of least privilege, validating translated content for XSS or credential leakage, verifying webhook secrets, and securing CI/CD pipelines against hardcoded secrets. Essential for developers and DevOps engineers.

This comprehensive guide provides templates for integrating MaintainX API testing into automated CI/CD pipelines. It covers multiple stages, including unit tests (mocked), live integration tests against staging environments, and security scans (like gitleaks). Use this when setting up robust, automated quality gates for your MaintainX SaaS integrations.

This guide demonstrates how to implement robust Role-Based Access Control (RBAC) for MaintainX integrations using TypeScript and Express. It defines multiple user roles (Admin, Manager, Technician, Viewer) with specific, granular permissions across various resources (work orders, assets, locations). The implementation utilizes permission middleware and scoped API keys to ensure that users can only perform actions designated by their assigned role, enforcing security and data integrity at the API level.

A comprehensive guide for configuring and managing multiple, isolated deployment environments (development, staging, production) for SaaS applications. It covers best practices such as using environment variables for configuration, implementing client factories for resource isolation, integrating secure secret management (e.g., GCP Secret Manager), and running validation scripts to ensure consistency and security across all deployment stages.

This comprehensive checklist guides developers and DevOps engineers through the necessary steps for deploying MaintainX integrations to a production environment. It covers crucial areas such as authentication security, error resilience (retry/circuit breaking), data integrity (idempotency, pagination), observability setup (logging/metrics), and modern deployment best practices, ensuring a stable and reliable go-live process.