Skill UI

Scans your codebase with pattern matching and entropy analysis to detect exposed secrets like API keys, passwords, and private keys, then generates remediation reports so you can fix vulnerabilities before committing or deploying code.

A comprehensive guide to implementing secure secrets management practices for Continuous Integration/Continuous Deployment (CI/CD) pipelines. It covers using industry-leading tools like HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, and GCP Secret Manager to securely store, retrieve, and automatically rotate credentials (API keys, database passwords, TLS certificates) without hardcoding them into source code. Includes best practices for least-privilege access and audit logging.

Provides authentication, authorization, encryption, secrets, and hardening patterns for designing secure auth flows, managing tokens, configuring CORS, and implementing best practices around API keys, JWT, OAuth, and rate limiting.

This comprehensive guide details how to harden Sentry's security posture and ensure compliance with regulations like GDPR. It covers best practices for managing sensitive data, implementing PII scrubbing, and configuring `beforeSend` hooks to automatically redact sensitive information such as passwords, API keys, tokens, IP addresses, and emails from client-side and server-side events.

This guide details how to configure the Speak language learning platform across multiple environments (dev, staging, production). It is essential for implementing robust SaaS deployments, ensuring that separate API keys, mock modes, and environment variables are correctly managed for seamless development and operational management.

This guide outlines essential security best practices for integrating the Speak API. It covers critical areas like securing API keys using secrets managers, ensuring audio data privacy by deleting local files, and maintaining compliance with major regulations such as COPPA and FERPA. Use this knowledge when building production-ready, secure language learning applications.

A comprehensive guide detailing the most common and critical mistakes when developing with Supabase. Covers severe security issues (like exposing service role keys or missing RLS), data integrity failures, and performance bottlenecks (connection pooling, N+1 queries). Essential for code review, onboarding new developers, or auditing existing Supabase projects to ensure secure and robust applications.

This skill provides a comprehensive guide to securing Supabase projects. It covers critical security measures, including proper separation of anonymous and service role keys, enforcing Row Level Security (RLS) on all tables, and hardening the API surface. Use this when setting up a new project, performing security audits, or implementing robust data access control policies.

Configure the TwinMind AI platform across development, staging, and production environments. This setup ensures secure separation of accounts and manages API keys for robust meeting AI operations, supporting enterprise features like on-premise deployment and SSO integration.

Validating Authentication Implementations assesses authentication mechanisms like JWT, OAuth, sessions, and API keys against security standards, then reports vulnerabilities and recommendations for password policy, MFA, token handling, and session security.

This skill provides robust guidelines and patterns for managing environment variables and sensitive credentials securely. It is designed to ensure that secrets, API keys, and other confidential information are never accidentally exposed or logged in Claude sessions, terminal outputs, development logs, or version control commits (like Git). Use this skill when handling sensitive data in development workflows to maintain maximum security.

A comprehensive guide to installing and configuring the Vast.ai Command Line Interface (CLI) and REST API access. This skill is used for setting up new cloud integrations, managing API keys, and initializing access to GPU compute instances from the Vast.ai marketplace. It provides steps for CLI authentication, environment variable setup, and implementing a Python client for resource management.