Skill UI

Implements robust Role-Based Access Control (RBAC) for enterprise Deepgram deployments. This skill demonstrates how to map various application roles (Admin, Developer, Analyst, etc.) to specific Deepgram API key scopes. It covers creating scoped keys, managing key lifecycles, and implementing middleware to enforce permissions, ensuring secure, auditable, and granular access control for team-based applications.

A comprehensive guide detailing security best practices for integrating with Instantly.ai. Learn how to implement least-privilege API scopes (e.g., campaigns:read), manage secrets using environment variables or dedicated secret managers, execute secure API key rotations, and validate incoming webhooks using custom headers. This skill is essential for developers building robust, secure, and scalable SaaS integrations.

This comprehensive guide demonstrates how to implement robust Role-Based Access Control (RBAC) for applications deeply integrated with Linear. It covers utilizing Linear's built-in roles, mapping application roles to specific OAuth scopes, implementing powerful permission guard middleware, and integrating advanced enterprise features like SAML SSO and SCIM provisioning, ensuring secure and scalable access management for large organizations.

A comprehensive guide detailing security best practices for integrating with Lokalise. Covers strategies for managing API token scopes (read-only vs. read-write), enforcing the principle of least privilege, validating translated content for XSS or credential leakage, verifying webhook secrets, and securing CI/CD pipelines against hardcoded secrets. Essential for developers and DevOps engineers.

A comprehensive guide to production-ready error tracking using Sentry SDK in TypeScript and Python. Learn how to implement structured error context via scopes, manage user journeys with breadcrumbs, filter out noise and PII using beforeSend/beforeBreadcrumb hooks, and use custom fingerprinting for accurate issue grouping. Essential for robust observability.

This skill analyzes Azure AD/Microsoft Entra ID environments to detect illicit OAuth application consent grants. It leverages the Microsoft Graph API and directory audit logs to enumerate permissions, identify overly broad scopes, and flag high-risk applications based on publisher verification status. It is essential for SOC analysts and threat hunters investigating cloud identity security incidents.

A comprehensive guide to building production-grade Laravel applications. It details architectural patterns for achieving scalability and maintainability, covering service/action separation, advanced Eloquent usage (casts, scopes), dependency injection via service containers, and robust API routing patterns.

This is an expert guide for writing, debugging, and validating complex expressions within n8n workflows. It covers core variables such as $json, $node, $now, and $env, detailing how to correctly access nested data from current nodes, previous nodes, and webhook payloads. Learn best practices for handling data structures, managing variable scopes, and avoiding common syntax errors to ensure reliable workflow automation.

This guide provides essential security controls for integrating with the Attio REST API. It details best practices for managing API tokens, including applying least-privilege scopes, implementing secure secret management across various platforms (AWS, Vercel, etc.), executing proper token rotation, and validating webhook signatures to prevent common security vulnerabilities.

This guide details essential security best practices for integrating with the Canva Connect API. It covers securing OAuth 2.0 tokens, implementing least-privilege scopes, ensuring secure token storage (encryption and server-side handling), and verifying webhook signatures using JWK. Essential for building robust and secure Canva integrations.

This guide manages critical migrations for the Figma REST API, addressing scope deprecations (e.g., migrating 'files:read' to granular scopes) and upgrading from Webhooks V1 to V2. It is essential for developers updating existing integrations to ensure compatibility with the latest API standards and security features.

A comprehensive guide detailing security best practices for the Hex data analytics platform. This covers secure API key management (read vs. run scopes), implementing least privilege access, validating webhooks, and redacting sensitive data from logs. Use this guide when auditing Hex security configuration or integrating secure data pipelines.