Skill UI

This guide teaches comprehensive security hardening for API integrations. Learn best practices for credential management (using environment variables/secret managers), implementing git hooks to prevent secret leaks, robust input validation (using Zod), structured audit logging, and mandatory key rotation procedures, ensuring system compliance and operational security.

This guide provides a comprehensive walkthrough for setting up and authenticating with the OpenRouter API. It covers generating secure API keys, configuring environment variables, and initializing clients in Python and TypeScript. Learn best practices for secure integration, including key management, verification, and key rotation, ensuring reliable connectivity to various large language models (LLMs).

A comprehensive technical audit checklist designed to validate the production readiness of OpenRouter API integrations. It covers critical areas including security practices (e.g., secret management, key rotation), system reliability (e.g., fallbacks, retries, timeouts), and observability requirements (e.g., structured logging, cost tracking). Use this guide before launching or during major operational reviews to ensure robust, scalable, and compliant deployments.

This guide outlines best practices for securing PostHog API keys. It differentiates between low-risk Project keys and high-privilege Personal keys, detailing methods for implementing least-privilege access, scoped key creation, secure rotation procedures, and leak prevention using environment variables, pre-commit hooks, and server-side isolation.

This guide provides a comprehensive overview of the core concepts of Three.js, the leading JavaScript library for WebGL 3D rendering. It covers setting up the entire 3D environment, including the Scene, Camera types (Perspective, Orthographic), and the WebGLRenderer. Users will learn to handle object hierarchies, apply transforms (position, rotation, scale), and manage complex rendering settings like lighting, shadows, and environment maps. Essential for any developer starting a WebGL project.

This comprehensive guide details robust techniques for managing the entire API key lifecycle. It mandates secure key generation with high entropy, server-side hashing (SHA-256/bcrypt) to prevent plaintext storage, and implements granular controls like per-key scoping (endpoints, IPs, rate limits). Key features include zero-downtime key rotation workflows and automated monitoring for key leakage across code repositories and logs. Ideal for server-to-server API authentication.

Provides comprehensive management for the entire RSA key lifecycle. This includes generating key pairs, enforcing NIST SP 800-57 guidelines, serializing keys in various formats (PEM, DER, PKCS#8), and implementing secure rotation and protection. Use this skill when establishing robust security architectures, ensuring compliance, or upgrading cryptographic systems for high-security applications.

This skill guide provides a comprehensive framework for automating the secure rotation of service account credentials. It addresses the challenge of managing long-lived secrets across diverse environments, including Active Directory, AWS, GCP, Azure, and databases. By implementing centralized secrets management (like HashiCorp Vault) and automated workflows, users can systematically eliminate stale credentials, dramatically reducing the risk of security breaches and non-compliance.

This comprehensive guide outlines essential security best practices for integrating with Adobe APIs. It covers securing OAuth credentials, implementing least-privilege scoping, managing zero-downtime credential rotation, and verifying I/O Events webhook signatures using cryptographic methods like RSA-SHA256. Essential for building secure, production-ready applications connected to Adobe services.

This guide details Algolia's security best practices, focusing on scoped API keys. It covers essential concepts like separating API keys for frontend vs. backend use, applying the principle of least privilege, and generating secured, time-limited, per-user keys. It also provides a complete procedure for key rotation to maintain a robust production security posture.

Provides comprehensive security guidelines for integrating Anthropic Claude API. Covers essential best practices including secure API key management (rotation, isolation), defending against prompt injection attacks by separating system instructions from user input, robust input sanitization, and output validation to prevent accidental data leakage. Essential for building production-grade, secure AI applications.

This guide provides essential security controls for integrating with the Attio REST API. It details best practices for managing API tokens, including applying least-privilege scopes, implementing secure secret management across various platforms (AWS, Vercel, etc.), executing proper token rotation, and validating webhook signatures to prevent common security vulnerabilities.