Skill UI

This skill guides the implementation of digital signatures using Ed25519, a high-performance cryptographic algorithm based on the Edwards curve. It provides 128-bit security with small keys and signatures, offering significant advantages over RSA and ECDSA, including deterministic signing and side-channel resistance. Learn to generate key pairs, sign documents and code, and verify signatures for robust security controls.

This skill guides the implementation of Gitleaks for robust secret scanning across development lifecycles. It covers setting up pre-commit hooks to prevent secrets from being committed, integrating scanning into CI/CD pipelines (like GitHub Actions), and writing custom regex rules to detect and remediate hardcoded credentials (API keys, passwords, tokens) in Git history, ensuring adherence to secure SDLC practices.

This skill guides the integration of gitleaks and trufflehog into CI/CD pipelines. It automates the detection of hardcoded secrets, such as API keys, passwords, and tokens, preventing their accidental deployment. By integrating scans as a mandatory pre-deployment gate, organizations enforce strong security policies and maintain compliance.

This skill automates the monitoring of public paste sites (e.g., Pastebin, GitHub Gists) to detect leaked credentials, API keys, and sensitive data dumps. It employs advanced regex patterns and keyword matching to provide early warning of security breaches, crucial for incident response, vulnerability assessment, and threat intelligence gathering.

A comprehensive guide for performing security assessments to identify various forms of sensitive data exposure, such as leaked API keys, PII in API responses, insecure client-side storage, and unprotected data transmission. This workflow covers scanning JavaScript files, analyzing API responses, verifying data encryption, and examining browser storage.

A comprehensive guide for implementing phishing-resistant multi-factor authentication using FIDO2/WebAuthn protocols. Learn to build a complete relying party server using Python, supporting both roaming hardware keys (e.g., YubiKey) and platform biometrics. Covers registration ceremonies, credential storage, and migrating to passwordless authentication.

A comprehensive guide for integrating Firebase Crashlytics into Flutter applications. It teaches how to capture fatal, non-fatal, and isolate errors, customize reports with user identifiers, custom keys, and logs, and manage opt-in data collection to ensure robust crash monitoring in production environments.

This skill performs a comprehensive security audit of Model Context Protocol (MCP) server configurations found in .mcp.json files. It is designed to identify critical vulnerabilities, including hardcoded secrets (API keys, tokens), dangerous shell injection patterns, unpinned dependencies, and compliance issues regarding approved server lists. Use this skill during security reviews, project onboarding, or pre-commit checks to ensure secure deployment.

This skill is designed for understanding complex database structures. It allows users to list all available tables, intelligently filter relevant tables based on natural language queries, retrieve detailed schemas (columns, types, primary/foreign keys), and map inter-table relationships. It culminates in generating the M-Schema format, which is essential for accurately preparing the context needed for advanced SQL query generation.

This guide demonstrates how to implement robust Role-Based Access Control (RBAC) for Algolia Enterprise environments. It covers defining granular permissions using ACLs, generating Secured API Keys for strict multi-tenant data isolation, and building middleware to validate service permissions, ensuring the principle of least privilege in large-scale applications.

A comprehensive guide for integrating the Algolia JavaScript v5 client into Node.js/TypeScript projects. It covers proper installation, secure management of Application IDs and API keys (Admin vs. Search-Only), and best practices for client initialization, ensuring robust and safe search functionality implementation.

This guide details Algolia's security best practices, focusing on scoped API keys. It covers essential concepts like separating API keys for frontend vs. backend use, applying the principle of least privilege, and generating secured, time-limited, per-user keys. It also provides a complete procedure for key rotation to maintain a robust production security posture.