Skill UI

This guide details best practices for securing Ideogram API integrations. It covers essential steps like using environment variables for key storage, implementing key rotation procedures, establishing server-side proxies to prevent key exposure, and sanitizing prompts to mitigate data leaks. Use this when setting up, maintaining, or auditing API security infrastructure.

A comprehensive guide detailing security best practices for integrating with Instantly.ai. Learn how to implement least-privilege API scopes (e.g., campaigns:read), manage secrets using environment variables or dedicated secret managers, execute secure API key rotations, and validate incoming webhooks using custom headers. This skill is essential for developers building robust, secure, and scalable SaaS integrations.

Specialized skill for designing, building, and optimizing modern, cloud-native enterprise Java applications. Covers microservices architecture, Spring Boot 3.x, reactive programming (WebFlux), advanced data persistence (JPA optimization, R2DBC), and robust security implementation (OAuth2/JWT). Use this when implementing DDD patterns, ensuring high test coverage, and managing complex transaction boundaries.

This guide provides comprehensive security best practices for integrating with the Juicebox API. It covers critical areas such as secure API key management (using secrets managers), robust webhook signature verification, input validation using schemas, and essential data protection techniques like PII redaction. It ensures compliance with global regulations like GDPR and CCPA when handling sensitive professional and contact data.

Guides implementing Kubernetes NetworkPolicy, RBAC, PodSecurityPolicy, Pod Security Standards, and OPA Gatekeeper constraints to enforce defense-in-depth across clusters, covering multi-tenant protection, admission control, and Istio service mesh policies.

Provides automated guidance and production-ready artifacts for key rotation manager workflows within advanced security scenarios.

A comprehensive framework for assessing the security, privacy, and compliance posture of Kling AI integrations. It covers crucial areas such as data residency, credential management, content policy adherence, and GDPR compliance (e.g., right to erasure). Use this guide when preparing for security audits or implementing robust data handling protocols for AI-generated content.

This skill provides comprehensive management for team access to AI APIs, ensuring security and accountability. It allows setting up role-based access control (admin, editor, viewer), implementing per-member and total team usage quotas, and managing separate API keys across Development, Staging, and Production environments. Ideal for scaling AI usage in enterprise settings.

This module implements comprehensive Role-Based Access Control (RBAC) for multi-tenant LangChain applications. It provides granular permission models for controlling model access, tool execution, and chain invocation. Key features include multi-tenant data isolation in vector stores, enforcing usage quotas (token limits), and integrating middleware for robust security enforcement. Ideal for building secure, scalable, and compliant enterprise LLM systems.

A specialized security auditor for Laravel applications. It analyzes code, APIs, and configurations against OWASP standards to detect vulnerabilities such as XSS, IDOR, SQL injection, and misconfigurations. Ideal for reviewing backend logic to ensure robust data protection and authorization.

A comprehensive guide for authorized security assessments, detailing systematic methods to escalate user privileges from low-level access to root control on Linux systems. Techniques covered include comprehensive system enumeration, exploiting kernel vulnerabilities (e.g., dirty pipe), abusing misconfigured sudo permissions (using gtfobins), and exploiting vulnerable SUID binaries.

This comprehensive checklist guides developers and DevOps engineers through the necessary steps for deploying MaintainX integrations to a production environment. It covers crucial areas such as authentication security, error resilience (retry/circuit breaking), data integrity (idempotency, pagination), observability setup (logging/metrics), and modern deployment best practices, ensuring a stable and reliable go-live process.