Skill UI

A comprehensive guide detailing security best practices for integrating and managing enterprise search with Glean. It covers critical topics such as indexing token management, validating webhook signatures, implementing input validation using Zod, and techniques for data redaction, ensuring that sensitive information is protected across the entire search lifecycle.

This guide provides essential security fundamentals for integrating with the Grammarly API. It covers secure credential management (client secrets, access tokens), OAuth token handling, webhook signature verification, and data redaction techniques to protect sensitive user content and maintain compliance.

A comprehensive guide detailing security best practices for the Hex data analytics platform. This covers secure API key management (read vs. run scopes), implementing least privilege access, validating webhooks, and redacting sensitive data from logs. Use this guide when auditing Hex security configuration or integrating secure data pipelines.

A comprehensive guide to implementing secure integration practices for Linktree APIs. Covers critical topics including secure secret management, robust webhook signature verification (HMAC-SHA256), input sanitization against XSS, and data redaction of Personally Identifiable Information (PII). Essential for developing resilient and secure third-party integrations.

A comprehensive guide to securing Web3 applications utilizing Alchemy. It covers critical best practices, including implementing secure API key proxies, managing private keys via secret vaults, validating blockchain inputs (addresses, block numbers), and verifying webhook signatures to harden your dApp infrastructure.

This guide outlines critical security best practices for design-to-code pipelines using Anima and Figma. It covers securing API credentials by restricting token scopes (e.g., read-only access for Figma), enforcing server-side execution for SDKs, and implementing robust secret management using cloud services like GCP Secret Manager. This minimizes the risk of credential leakage in CI/CD environments.

This guide provides essential security practices for integrating with the AppFolio platform. It covers secure API credential management, implementing robust webhook signature verification, validating incoming tenant data payloads, and redacting sensitive PII (like SSNs and bank accounts) from logs. Use this when building integrations that handle owner or tenant financial data to ensure compliance and prevent data breaches.

Provides comprehensive security best practices for integrating AssemblyAI into production applications. This guide covers secure API key management (using environment variables), generating temporary tokens for browser streams, implementing PII redaction, managing data retention, and enabling content safety checks for compliance and security.

This guide provides comprehensive security best practices for integrating with BambooHR. It covers crucial topics like robust API key management (including quarterly rotation procedures), implementing HMAC webhook signature verification to prevent data tampering, and detailed guidelines for handling sensitive PII data (SSN, salary) to ensure compliance and data integrity.

This guide details essential best practices for securing applications integrated with Anthropic's Claude API. It covers critical security measures including secure API key management (server-side only), robust input validation to prevent cost attacks, defense mechanisms against prompt injection, and implementing per-user rate limiting. Essential reading for maintaining data privacy and system integrity in production environments.

This guide outlines best practices for securing your Clari integration. It covers secure API token management, emphasizing storage in secrets managers (like AWS Secrets Manager), and implementing robust PII redaction methods for exported forecast data to maintain data privacy and compliance.

A comprehensive guide to securing ClickUp API usage. Learn best practices for managing API tokens, implementing least-privilege access, and auditing usage patterns. This includes secure token rotation procedures, using environment variables, setting up pre-commit hooks to prevent leaks, and structuring calls for robust audit logging.