Skill UI

A comprehensive, compliant wrapper for integrating with the Groq API. This module automatically sanitizes input prompts and filters model responses to redact sensitive PII (emails, phone numbers, SSN, etc.). It also tracks detailed token usage and generates robust audit logs, ensuring data privacy and regulatory compliance (GDPR, etc.) in enterprise AI applications.

A comprehensive guide detailing security best practices for building and deploying applications on the Replit platform. Learn how to properly manage sensitive data using Replit Secrets (AES-256 encryption), implement secure service-to-service authentication via REPL_IDENTITY tokens, validate custom headers, and prevent common vulnerabilities like hardcoded API keys and SQL injection. Essential for auditing and securing production environments.

A comprehensive solution for identifying and preventing the accidental commitment of exposed AWS credentials, API keys, and session tokens within source code, configuration files, and git history. It integrates TruffleHog and git-secrets into CI/CD pipelines and pre-commit hooks, providing critical protection against credential theft and unauthorized cloud access in a DevSecOps environment. Essential for security auditing and compliance.

This skill audits Azure Blob and ADLS storage accounts for critical security misconfigurations. It checks for public access exposure, weak or long-lived SAS tokens, missing encryption at rest, and outdated TLS versions. Using the Python SDK, it generates a detailed, risk-scored report to enhance cloud security posture management and detect potential data exposure risks.

This guide provides a comprehensive framework for auditing Azure Storage accounts to detect critical security misconfigurations. It specifically checks for publicly accessible blob containers, insufficient encryption settings (e.g., missing infrastructure encryption), overly permissive network rules, and exposed SAS tokens. It is essential for compliance verification, responding to security alerts (like anonymous access), and establishing a robust security baseline when onboarding new cloud subscriptions.

A specialized audit skill designed to identify and quantify resource leakage, excessive costs, and billing vulnerabilities within complex development tool workflows (e.g., GitHub Apps). It traces webhook events, queue processing, and model calls to pinpoint where token burn or unauthorized resource usage is occurring, ensuring cost efficiency and clean billing practices.

A comprehensive resource detailing common anti-patterns and critical mistakes when integrating with the Canva Connect API. This guide covers essential best practices, including robust token management, handling rate limits, implementing asynchronous workflows, and securing webhooks. Ideal for developers conducting code reviews, onboarding new team members, or auditing existing Canva-related integrations.

This comprehensive guide details the ten most common mistakes and anti-patterns encountered when integrating with the Figma REST and Plugin APIs. It covers critical topics such as preventing oversized data fetches, managing rate limits, securing tokens, handling color format conversions, and optimizing data sync using webhooks instead of polling. Essential for code reviews and onboarding. Use when reviewing Figma code, onboarding new developers, or auditing an existing Figma integration.

A comprehensive guide to securing ClickUp API usage. Learn best practices for managing API tokens, implementing least-privilege access, and auditing usage patterns. This includes secure token rotation procedures, using environment variables, setting up pre-commit hooks to prevent leaks, and structuring calls for robust audit logging.

This comprehensive guide outlines essential security protocols for integrating with the Figma API. It covers best practices including securely storing Personal Access Tokens (PATs), implementing least-privilege scopes, managing token rotation lifecycles, and verifying incoming webhook payloads. Use this when setting up, auditing, or maintaining production-grade Figma integrations to ensure data integrity and prevent unauthorized access.

This guide provides a comprehensive blueprint for implementing enterprise-grade Role-Based Access Control (RBAC) for Notion integrations. It covers the full OAuth 2.0 flow for public, multi-tenant apps, secure per-workspace token storage (with encryption), and layering custom permission models (admin/editor/viewer) over Notion's native permissions. Essential for building robust, secure, and audit-compliant Notion applications.

This guide details comprehensive security best practices for Webflow Data API v2. It covers crucial topics such as selecting the correct token type, implementing least privilege access scopes, secure secret rotation, and verifying webhook signatures. Use this knowledge when building or auditing Webflow integrations to ensure robust data security and system reliability.