Skill UI

A comprehensive guide to integrating privacy protections into software architecture from the ground up. This skill ensures compliance with major global regulations like GDPR, CCPA, and LGPD by implementing core principles such as data minimization, purpose limitation, and default privacy settings. Essential for developers building any application that handles personal user data.

This skill guides security testers in identifying excessive data exposure in REST and GraphQL APIs. It involves intercepting API responses and analyzing them for leaked Personally Identifiable Information (PII), internal identifiers, or sensitive business data that the client UI does not display but the API transmits. It maps directly to OWASP API3:2023 Broken Object Property Level Authorization, helping prevent data leaks via over-fetching.

A comprehensive guide to building HIPAA, GDPR, and other global compliance systems for healthcare applications. This pattern outlines best practices for protecting Protected Health Information (PHI) and Personally Identifiable Information (PII) by implementing robust access controls, Row-Level Security (RLS), and mandatory audit trails. Essential for any feature handling patient or clinical data.

A comprehensive guide on using the nacos-cli tool to discover, install, update, merge, and publish AI skills stored in a Nacos registry. It covers key commands for listing, getting, uploading, reviewing, and releasing skills, ensuring version-aware publishing workflows for personal and team use.

A comprehensive guide for engineers, architects, and DevOps teams on implementing General Data Protection Regulation (GDPR) best practices. This skill covers Privacy by Design, data minimization, purpose limitation, retention policies, secure API design, and compliant logging practices. Use it when handling any personal data, designing new features, or reviewing systems for data privacy compliance.

A comprehensive guide to implementing secure and compliant data handling within Algolia. This skill demonstrates how to transform source records, strip Personally Identifiable Information (PII), implement attribute filtering, and enforce data access controls. It provides robust workflows for GDPR and CCPA compliance, including data deletion (Right to Erasure) and Data Subject Access Requests (DSAR).

Provides comprehensive guides on setting up ClickUp API v2 authentication. Learn how to implement both Personal API Tokens (for server-side use) and OAuth 2.0 (for multi-user applications). This skill covers secure credential management, making authenticated HTTP requests, and handling common API error codes, ensuring robust integration development.

A comprehensive guide to implementing secure integration practices for Linktree APIs. Covers critical topics including secure secret management, robust webhook signature verification (HMAC-SHA256), input sanitization against XSS, and data redaction of Personally Identifiable Information (PII). Essential for developing resilient and secure third-party integrations.

Implement robust data handling practices when integrating with Adobe APIs. This comprehensive guide covers critical compliance areas, including Personally Identifiable Information (PII) redaction from extracted PDFs, enforcing Firefly content policies, secure credential redaction in logs, and managing data subject access/deletion requests for GDPR/CCPA compliance using the Adobe Privacy Service API. Essential for building privacy-compliant enterprise applications.

Detailed guide on securing Cohere API integration. Covers best practices for API key management (using environment variables), implementing mandatory key rotation procedures, scrubbing Personally Identifiable Information (PII), and ensuring secure logging practices, helping developers build production-ready, secure applications.

Provides comprehensive security guidelines and code patterns for integrating with the Fathom API. This module covers critical security concerns such as API key management, webhook signature verification, PII (Personally Identifiable Information) redaction, and robust input validation. It ensures compliance and protects highly sensitive meeting transcripts and confidential business data in production environments.

This guide provides comprehensive instructions on setting up and authenticating with the Figma REST API. It covers two primary authentication methods: Personal Access Tokens (PATs) for server-side scripting, and the OAuth 2.0 flow for building user-facing applications. Learn how to generate tokens, manage granular scopes, and securely integrate your code with Figma's design data.