Skill UI

Automates Accredible Certificates operations through Composio’s Rube MCP workflows, guiding discovery, connection validation, and schema-compliant tool execution for credential-related tasks.

Comprehensive guide for authenticating to various Azure services using the official Azure Identity SDK in TypeScript. This SDK supports multiple credential types, including DefaultAzureCredential, Managed Identity, Service Principal (secrets/certificates), and integration with Azure CLI/PowerShell, ensuring secure and flexible authentication across local development, CI/CD, and cloud environments.

This is a comprehensive Rust SDK client library for interacting with Azure Key Vault Certificates. It enables developers to securely manage the entire certificate lifecycle, including creating new certificates, importing existing PFX/PEM files, retrieving details, updating policies, and safely deleting resources. Ideal for building robust, security-critical applications on Azure.

A comprehensive Python SDK guide for securely managing secrets, cryptographic keys, and certificates within Azure Key Vault. This tool allows developers to implement secure storage, perform cryptographic operations (encryption, decryption, signing, verification), and handle certificate lifecycle management, ensuring sensitive application data is protected across various development environments.

A comprehensive guide detailing essential security best practices for integrating with Documenso document signing. Covers critical topics such as secure API key management (using environment variables), robust webhook secret verification (preventing timing attacks), implementing least privilege document access control, and setting up secure self-hosted signing certificates and secrets.

Manages SSL/TLS certificates via the ssl-certificate-manager plugin by checking expiry dates, renewing certificates, listing installations, and reporting results to keep connections secure and troubleshooting informed.

A comprehensive guide to implementing secure secrets management practices for Continuous Integration/Continuous Deployment (CI/CD) pipelines. It covers using industry-leading tools like HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, and GCP Secret Manager to securely store, retrieve, and automatically rotate credentials (API keys, database passwords, TLS certificates) without hardcoding them into source code. Includes best practices for least-privilege access and audit logging.

Step-by-step guide for using URLScan.io via web UI and API to investigate phishing and credential-harvesting URLs, capture page screenshots, DOM, network logs, and certificates, extract IOCs, and correlate results with VirusTotal, PhishTank, and Google Safe Browsing while keeping analysts isolated.

Monitors crt.sh certificate transparency logs via pycrtsh to detect phishing domains, unauthorized issuance, typosquatting, and shadow IT, enabling SOC analysts to proactively hunt for suspicious certificates and validate monitoring coverage.

Guides teams through standing up SAML 2.0 federation between on-premises AD/AD FS (or third-party IdP) and Microsoft Entra ID, covering domain conversion, certificates, claims rules, and federated SSO for cloud SaaS apps.

Exploit misconfigured Active Directory Certificate Services ESC1 templates to request certificates as privileged users, then escalate to Domain Admin during authorized red team or pentest work. Includes enumeration, certificate requests, PKINIT authentication, and follow-on domain access.

Configures mutual TLS authentication between microservices using Python cryptography and ssl modules, generating CA/service certificates, validating chains, checking expiration, and auditing deployment status to enforce zero-trust service-to-service security.