Skill UI

This guide teaches comprehensive security hardening for API integrations. Learn best practices for credential management (using environment variables/secret managers), implementing git hooks to prevent secret leaks, robust input validation (using Zod), structured audit logging, and mandatory key rotation procedures, ensuring system compliance and operational security.

This guide provides a comprehensive walkthrough for setting up and authenticating with the OpenRouter API. It covers generating secure API keys, configuring environment variables, and initializing clients in Python and TypeScript. Learn best practices for secure integration, including key management, verification, and key rotation, ensuring reliable connectivity to various large language models (LLMs).

A comprehensive technical audit checklist designed to validate the production readiness of OpenRouter API integrations. It covers critical areas including security practices (e.g., secret management, key rotation), system reliability (e.g., fallbacks, retries, timeouts), and observability requirements (e.g., structured logging, cost tracking). Use this guide before launching or during major operational reviews to ensure robust, scalable, and compliant deployments.

This guide outlines best practices for securing PostHog API keys. It differentiates between low-risk Project keys and high-privilege Personal keys, detailing methods for implementing least-privilege access, scoped key creation, secure rotation procedures, and leak prevention using environment variables, pre-commit hooks, and server-side isolation.

This comprehensive guide details robust techniques for managing the entire API key lifecycle. It mandates secure key generation with high entropy, server-side hashing (SHA-256/bcrypt) to prevent plaintext storage, and implements granular controls like per-key scoping (endpoints, IPs, rate limits). Key features include zero-downtime key rotation workflows and automated monitoring for key leakage across code repositories and logs. Ideal for server-to-server API authentication.

Provides comprehensive management for the entire RSA key lifecycle. This includes generating key pairs, enforcing NIST SP 800-57 guidelines, serializing keys in various formats (PEM, DER, PKCS#8), and implementing secure rotation and protection. Use this skill when establishing robust security architectures, ensuring compliance, or upgrading cryptographic systems for high-security applications.

This guide details Algolia's security best practices, focusing on scoped API keys. It covers essential concepts like separating API keys for frontend vs. backend use, applying the principle of least privilege, and generating secured, time-limited, per-user keys. It also provides a complete procedure for key rotation to maintain a robust production security posture.

Provides comprehensive security guidelines for integrating Anthropic Claude API. Covers essential best practices including secure API key management (rotation, isolation), defending against prompt injection attacks by separating system instructions from user input, robust input sanitization, and output validation to prevent accidental data leakage. Essential for building production-grade, secure AI applications.

A comprehensive guide for rapid incident response when Algolia search functionality fails. This runbook provides structured procedures for triage, differentiating between infrastructure outages and internal configuration errors (e.g., API keys, indexing failures). It includes severity classification, diagnosis steps, and code examples for immediate remediation, such as key rotation or implementing circuit breakers.

This guide provides comprehensive security best practices for integrating with BambooHR. It covers crucial topics like robust API key management (including quarterly rotation procedures), implementing HMAC webhook signature verification to prevent data tampering, and detailed guidelines for handling sensitive PII data (SSN, salary) to ensure compliance and data integrity.

Detailed guide on securing Cohere API integration. Covers best practices for API key management (using environment variables), implementing mandatory key rotation procedures, scrubbing Personally Identifiable Information (PII), and ensuring secure logging practices, helping developers build production-ready, secure applications.

This guide provides comprehensive security standards for integrating with the Flexport API. It covers critical best practices such as webhook signature verification, secure API key rotation, implementing least-privilege access controls, and data redaction for handling sensitive logistics and customs data. Essential for maintaining compliance and preventing data breaches in supply chain operations.