Skill UI

This guide provides comprehensive security standards for integrating with the Flexport API. It covers critical best practices such as webhook signature verification, secure API key rotation, implementing least-privilege access controls, and data redaction for handling sensitive logistics and customs data. Essential for maintaining compliance and preventing data breaches in supply chain operations.

This guide details the security best practices for managing and using Hootsuite API credentials and tokens. It covers crucial topics such as secure storage of Client IDs, Client Secrets, and various tokens (Access/Refresh), emphasizing token rotation, implementing least privilege access, and securing OAuth 2.0 workflows in production environments.

A comprehensive guide for implementing robust policy enforcement and security guardrails in HubSpot integrations. This methodology covers secret scanning within CI/CD pipelines to prevent token leaks, utilizes ESLint rules for enforcing modern authentication practices, and leverages TypeScript for compile-time and runtime checks. Use this when setting up secure, scalable, and compliant codebases for HubSpot APIs.

A comprehensive guide to securing HubSpot API integrations. Details best practices for implementing least-privilege scopes, securely managing access tokens in environment variables, validating webhook signatures (v3), and executing proper token rotation procedures. Essential knowledge for building robust and secure applications connected to HubSpot.

A comprehensive guide to setting up and processing Klaviyo webhooks. This skill covers creating webhook subscriptions via the API, implementing crucial HMAC-SHA256 signature verification for security, and building a robust event handler. Learn how to manage different topic types (e.g., profile updates, list changes) and ensure idempotency, making your application reliable for event-driven marketing integrations.

A comprehensive guide for developers implementing secure integrations with the Miro REST API v2. This guide covers critical security best practices, including OAuth 2.0 scope minimization, robust token lifecycle management (refreshing tokens), verifying webhooks using signatures, and implementing client secret rotation protocols. Essential for building reliable and secure SaaS applications connected to Miro.

A comprehensive checklist for validating the operational readiness of any Navan API integration before deployment to a live production environment. This guide covers critical areas including credential security (rotation, secret management), robust error handling, rate limit strategies, Single Sign-On (SSO) setup, data synchronization, and compliance auditing (PCI DSS, GDPR). Use this when ensuring mission-critical API stability.

A comprehensive guide to securing Navan integrations and API access. This skill covers OAuth 2.0 best practices, secure credential storage, automated credential rotation, configuring Single Sign-On (SSO) via SAML/OpenID Connect, and implementing automated user lifecycle management using SCIM provisioning. Essential for hardening enterprise-level integrations.

This comprehensive skill provides a structured, actionable checklist for verifying and auditing Notion API integrations before they go live in a production environment. It covers critical areas such as environment variable security, least-privilege capability scoping, robust rate limit handling, data pagination, and comprehensive error management. Use this checklist during go-live preparation, system audits, or major feature deployments to ensure the integration is secure, stable, and fully functional.

This guide covers essential security protocols for integrating with the Notion API. Learn how to manage integration tokens securely, implement OAuth2 flows, and enforce the principle of least privilege by separating read/write capabilities. It is crucial for developers building robust, secure Notion-powered applications.

A comprehensive guide detailing advanced offensive fuzzing methodologies. It covers the full lifecycle from target identification (parsers, network protocols, kernels) to tool selection (AFL++, libFuzzer, Honggfuzz, syzkaller), building harnesses, curating seed corpora, executing fuzz campaigns, and finally, performing crash triage and vulnerability analysis. Essential for security researchers and embedded systems developers.

This skill provides a comprehensive checklist and methodology for identifying Server-Side Template Injection (SSTI) vulnerabilities. It covers template engine identification (e.g., Jinja2, Twig), polyglot payload generation, systematic detection methods, and executing engine-specific Remote Code Execution (RCE) payloads. Ideal for security professionals testing web application input sanitization.