Skill UI

This guide provides methods to implement robust data handling, secret detection, and compliance patterns within code reviews (e.g., GDPR, CCPA). It teaches users how to configure CodeRabbit to exclude sensitive files (like .env or keys), detect hardcoded secrets, limit the review scope to active source code, and ensure that PII is properly handled during the CI/CD process.

Detects fail-open insecure defaults such as hardcoded secrets, weak auth, or permissive security that allow production apps to run unsafely, guiding auditors through discovery, verification, confirmation, and reporting steps during security reviews or deployment validation.

This comprehensive guide details how to configure robust multi-environment deployments (Development, Staging, Production) within the Replit ecosystem. It covers best practices for database separation, managing environment-specific secrets, implementing reliable environment detection logic, and setting up CI/CD pipelines to ensure applications are stable and secure across all deployment stages.

Secret Scanner Assistant auto-activates within Security Fundamentals to guide you on secret detection, authentication, validation, secure coding, and vulnerability checks with best practices.

A comprehensive guide to configuring Vercel across Development, Preview, and Production environments. Learn how to scope environment variables, manage secrets, and automate multi-stage deployments using both the Vercel CLI and REST API. Covers setting up custom environments (e.g., Staging) and implementing environment detection in code for reliable application behavior.

A comprehensive guide detailing how to integrate DevSecOps best practices into a GitLab CI/CD pipeline. It automates multiple security checks, including Static Analysis (SAST), Dynamic Analysis (DAST), container scanning, dependency scanning, and secret detection. This approach enforces 'shift-left' security, finding and fixing vulnerabilities early in the development lifecycle to ensure compliance and robust security.

Automates comprehensive security scanning by integrating SAST (Semgrep), DAST (OWASP ZAP), SCA (Trivy), and secrets detection (Gitleaks) into CI/CD pipelines. This solution helps organizations shift security left, detect vulnerabilities early, and meet strict compliance mandates such as SOC 2, PCI-DSS, and ISO 27001.

This skill guides the integration of gitleaks and trufflehog into CI/CD pipelines. It automates the detection of hardcoded secrets, such as API keys, passwords, and tokens, preventing their accidental deployment. By integrating scans as a mandatory pre-deployment gate, organizations enforce strong security policies and maintain compliance.

This guide provides a comprehensive walkthrough for authenticating and initializing the Grammarly SDK/CLI. Learn how to use OAuth 2.0 Bearer tokens to securely connect to Grammarly's services (including Writing Score, AI Detection, and Plagiarism Detection). Use this skill when setting up a new integration, handling API key configuration, or managing token refreshing in a development project.

This comprehensive guide details how to use industry-leading tools like TruffleHog and git-secrets to scan source code repositories, full git history, and configuration files for hardcoded AWS credentials and secrets. It is essential for integrating secrets detection into CI/CD pipelines, performing proactive security audits, and ensuring compliance by preventing sensitive keys from reaching production environments.