Skill UI

This guide provides essential security best practices for implementing Langfuse, an LLM observability platform. It covers critical areas such as secure credential management (public vs. secret keys), implementing PII scrubbing techniques before tracing, hardening self-hosted environments, and enforcing the principle of least privilege. Use this guide to ensure your LLM integrations meet strict data privacy standards (e.g., GDPR, HIPAA).

This guide details the best practices for configuring and isolating AI agents across development, staging, and production environments. It covers the setup of separate workspaces, secure secret management using tools like Vault/AWS/GCP, and integrating environment-aware logic into CI/CD pipelines to ensure data integrity and smooth promotion from dev to prod.

This comprehensive checklist provides best practices and patterns for deploying Linear integrations to a production environment. It covers critical areas including robust authentication and secure secret management, error handling and system resilience (rate limiting, timeouts), performance optimization (caching, batching), and setting up full observability (health checks, structured logging). Use this when preparing for a go-live or auditing existing deployments.

A comprehensive guide for configuring localization services (Lokalise) across multiple deployment environments (development, staging, production). It details two strategies: dedicated projects or single-project branching. Focuses heavily on secure secret management using tools like AWS Secrets Manager, GCP Secret Manager, and HashiCorp Vault, ensuring that environment-specific configurations and translations remain isolated throughout the CI/CD pipeline.

A comprehensive guide for configuring and managing multiple, isolated deployment environments (development, staging, production) for SaaS applications. It covers best practices such as using environment variables for configuration, implementing client factories for resource isolation, integrating secure secret management (e.g., GCP Secret Manager), and running validation scripts to ensure consistency and security across all deployment stages.

This guide teaches comprehensive security hardening for API integrations. Learn best practices for credential management (using environment variables/secret managers), implementing git hooks to prevent secret leaks, robust input validation (using Zod), structured audit logging, and mandatory key rotation procedures, ensuring system compliance and operational security.

Manages environment configurations and secrets across development, staging, and production deployments by invoking the environment-config-manager plugin to generate, update, or retrieve files, keeping DevOps workflows secure and consistent.

This comprehensive guide details the deployment process for Mistral AI-powered applications across various cloud and container platforms, including Vercel, Docker, Google Cloud Run, and self-hosted vLLM setups. It covers secure API key management, platform-specific secret configuration, and the full steps required to establish robust, scalable production pipelines for your AI model.

A comprehensive technical audit checklist designed to validate the production readiness of OpenRouter API integrations. It covers critical areas including security practices (e.g., secret management, key rotation), system reliability (e.g., fallbacks, retries, timeouts), and observability requirements (e.g., structured logging, cost tracking). Use this guide before launching or during major operational reviews to ensure robust, scalable, and compliant deployments.

This guide provides a comprehensive setup for Replit applications. It covers configuring essential files like .replit and replit.nix for dependency management, securely managing environment secrets (AES-256), and integrating robust user authentication via Replit Auth (supporting Google, GitHub, etc.). Ideal for starting a new, production-ready Replit project.

This guide identifies and explains common anti-patterns and critical pitfalls encountered when building applications on the Replit platform. Topics include data persistence, secret management, networking bindings, and environment configuration. Use this resource when conducting code reviews, onboarding new developers, or auditing existing Replit applications for best practices.

A comprehensive guide to implementing secure secrets management practices for Continuous Integration/Continuous Deployment (CI/CD) pipelines. It covers using industry-leading tools like HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, and GCP Secret Manager to securely store, retrieve, and automatically rotate credentials (API keys, database passwords, TLS certificates) without hardcoding them into source code. Includes best practices for least-privilege access and audit logging.