Skill UI

This guide provides comprehensive best practices for securing Evernote API integrations. It covers essential topics like secure credential management using environment variables or vaults, implementing CSRF-protected OAuth flows, encrypting access tokens at rest using AES-256-GCM, rigorous input validation, and ensuring secure logging practices by redacting sensitive data. Use this when hardening your application against data breaches.

This guide outlines critical security measures for integrating with Guidewire systems, which handle sensitive policyholder PII, claims, and financial data. It covers best practices for implementing OAuth2 JWT authentication, API role scoping, input validation, and sensitive data redaction (PII) to prevent data breaches and meet compliance standards.

Tracks and optimizes application response times using the response-time-tracker plugin, covering API endpoints, database queries, external calls, frontend rendering, and background jobs to highlight bottlenecks or SLO breaches.

This skill automates the monitoring of public paste sites (e.g., Pastebin, GitHub Gists) to detect leaked credentials, API keys, and sensitive data dumps. It employs advanced regex patterns and keyword matching to provide early warning of security breaches, crucial for incident response, vulnerability assessment, and threat intelligence gathering.

This skill guide provides a comprehensive framework for automating the secure rotation of service account credentials. It addresses the challenge of managing long-lived secrets across diverse environments, including Active Directory, AWS, GCP, Azure, and databases. By implementing centralized secrets management (like HashiCorp Vault) and automated workflows, users can systematically eliminate stale credentials, dramatically reducing the risk of security breaches and non-compliance.

This expert reviews and rectifies complex Swift Concurrency issues, such as actor isolation violations, Sendable safety breaches, and data races. It applies modern patterns (like `@MainActor` and `actor` usage) to ensure code adheres to Swift 6.2+ standards while minimizing behavior changes. Use it when debugging concurrency warnings or migrating legacy codebases.

This skill provides comprehensive guardrails for handling Protected Health Information (PHI) in US healthcare software. It guides development teams on data classification, security best practices, access control, and audit logging to ensure strict adherence to HIPAA regulations. Use it when dealing with patient data storage, transmission, or processing to prevent breaches and maintain compliance.

This guide provides essential security practices for integrating with the AppFolio platform. It covers secure API credential management, implementing robust webhook signature verification, validating incoming tenant data payloads, and redacting sensitive PII (like SSNs and bank accounts) from logs. Use this when building integrations that handle owner or tenant financial data to ensure compliance and prevent data breaches.

This guide provides comprehensive security standards for integrating with the Flexport API. It covers critical best practices such as webhook signature verification, secure API key rotation, implementing least-privilege access controls, and data redaction for handling sensitive logistics and customs data. Essential for maintaining compliance and preventing data breaches in supply chain operations.

This skill performs a proactive, comprehensive audit to quantify the business and regulatory impact of a potential data breach before it occurs. It inventories sensitive data (PII, PHI, PCI-DSS), traces complex data flows through the codebase, identifies all exposure vectors, and calculates the 'blast radius.' The output provides law-sourced figures (e.g., GDPR, CCPA, HIPAA fine maximums) alongside heuristic risk estimates, guiding proactive hardening roadmaps for compliance and security.

This skill simulates a Data Protection Officer (DPO) audit, pressure-testing privacy compliance across six critical, Article-cited GDPR areas. It is essential for pre-annual audits, post-breach assessments, DPA investigations, and M&A due diligence, ensuring readiness across RoPA, lawful basis, DPIA, DSAR, and international data transfers.

This skill provides comprehensive guardrails for handling Protected Health Information (PHI) in US healthcare software. It guides development teams on data classification, security best practices, access control, and audit logging to ensure strict adherence to HIPAA regulations. Use it when dealing with patient data storage, transmission, or processing to prevent breaches and maintain compliance.