Skill UI

A comprehensive SDK providing robust authentication credentials for Python applications interacting with Azure services. It simplifies secure access by supporting multiple credential types, including Managed Identity, Service Principal, and Azure CLI. Features like DefaultAzureCredential allow seamless authentication across local environments, CI/CD pipelines, and various Azure cloud deployments.

A comprehensive SDK providing robust authentication credentials for Python applications interacting with Azure services. It simplifies secure access by supporting multiple credential types, including Managed Identity, Service Principal, and Azure CLI. Features like DefaultAzureCredential allow seamless authentication across local environments, CI/CD pipelines, and various Azure cloud deployments.

This guide provides comprehensive best practices for securing Evernote API integrations. It covers essential topics like secure credential management using environment variables or vaults, implementing CSRF-protected OAuth flows, encrypting access tokens at rest using AES-256-GCM, rigorous input validation, and ensuring secure logging practices by redacting sensitive data. Use this when hardening your application against data breaches.

A comprehensive guide detailing how to set up secure API authentication for Kling AI using JSON Web Tokens (JWT). This process involves generating tokens from your Access Key (AK) and Secret Key (SK) credentials, providing code examples for Python and Node.js, and implementing best practices for token management and refreshing to ensure continuous API access.

This bundle collects comprehensive diagnostic evidence from the OpenEvidence clinical decision support API. It validates API credentials, checks query endpoint health, retrieves evidence citations, and captures model metadata. Use it to diagnose complex issues like query failures, missing references, or high latency without needing direct dashboard access.

A comprehensive guide to implementing secure secrets management practices for Continuous Integration/Continuous Deployment (CI/CD) pipelines. It covers using industry-leading tools like HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, and GCP Secret Manager to securely store, retrieve, and automatically rotate credentials (API keys, database passwords, TLS certificates) without hardcoding them into source code. Includes best practices for least-privilege access and audit logging.

This policy set establishes comprehensive guardrails for using AI coding assistants (like Windsurf/Cascade). It governs terminal commands, enforces workspace isolation (preventing access to secrets/credentials), and integrates CI/CD gates for code quality. Use this when setting up team development standards, mandatory code review policies for AI output, or implementing secure development pipelines.

Guides users through the AionUi Settings interface to enable WebUI, open remote access via LAN, Tailscale, or server deployment, fetch access credentials, and troubleshoot service issues without using the command line.

A comprehensive guide to configuring secure OAuth 2.0 authorization flows, covering best practices for Authorization Code with PKCE, Client Credentials, and Device Authorization Grant. Learn how to implement mandatory security controls, manage token lifecycles, and align with OAuth 2.1 standards to build robust identity and access management systems.

A comprehensive solution for identifying and preventing the accidental commitment of exposed AWS credentials, API keys, and session tokens within source code, configuration files, and git history. It integrates TruffleHog and git-secrets into CI/CD pipelines and pre-commit hooks, providing critical protection against credential theft and unauthorized cloud access in a DevSecOps environment. Essential for security auditing and compliance.

This tool automates the extraction of embedded configuration details from Agent Tesla Remote Access Trojan (RAT) samples. It is designed to recover crucial exfiltration credentials (SMTP, FTP, Telegram), keylogger settings, and Command and Control (C2) endpoints by analyzing and deobfuscating the .NET assembly structure. Essential for threat intelligence, incident response, and malware reverse engineering.

EvilGinx3 is an advanced Adversary-in-the-Middle (AiTM) framework designed for red teaming simulations. It goes beyond traditional credential harvesting by acting as a transparent proxy to intercept the entire authentication flow, including session cookies and Multi-Factor Authentication (MFA) tokens. This capability allows security professionals to assess the robustness of an organization's security posture against sophisticated account takeover attacks.