Skill UI

A comprehensive guide detailing best practices for securing Groq API keys and managing data privacy. It covers critical steps such as using environment variables, implementing secure key rotation procedures, preventing key leaks via pre-commit hooks, and defending against prompt injection attacks for robust application development.

This guide outlines critical security measures for integrating with Guidewire systems, which handle sensitive policyholder PII, claims, and financial data. It covers best practices for implementing OAuth2 JWT authentication, API role scoping, input validation, and sensitive data redaction (PII) to prevent data breaches and meet compliance standards.

This guide details best practices for securing Ideogram API integrations. It covers essential steps like using environment variables for key storage, implementing key rotation procedures, establishing server-side proxies to prevent key exposure, and sanitizing prompts to mitigate data leaks. Use this when setting up, maintaining, or auditing API security infrastructure.

A comprehensive guide detailing security best practices for integrating with Instantly.ai. Learn how to implement least-privilege API scopes (e.g., campaigns:read), manage secrets using environment variables or dedicated secret managers, execute secure API key rotations, and validate incoming webhooks using custom headers. This skill is essential for developers building robust, secure, and scalable SaaS integrations.

This comprehensive checklist guides the operational validation of the Juicebox AI talent search and analysis platform in a production environment. It ensures system reliability, data security, and service continuity by reviewing critical areas such as API key management, rate limit handling, robust error detection (circuit breakers, exponential backoff), data encryption (GDPR/CCPA compliance), and comprehensive monitoring setup. It is essential for preventing service failures and maintaining search data integrity.

This guide provides comprehensive security best practices for integrating with the Juicebox API. It covers critical areas such as secure API key management (using secrets managers), robust webhook signature verification, input validation using schemas, and essential data protection techniques like PII redaction. It ensures compliance with global regulations like GDPR and CCPA when handling sensitive professional and contact data.

This skill provides comprehensive management for team access to AI APIs, ensuring security and accountability. It allows setting up role-based access control (admin, editor, viewer), implementing per-member and total team usage quotas, and managing separate API keys across Development, Staging, and Production environments. Ideal for scaling AI usage in enterprise settings.

This guide provides essential security best practices for implementing Langfuse, an LLM observability platform. It covers critical areas such as secure credential management (public vs. secret keys), implementing PII scrubbing techniques before tracing, hardening self-hosted environments, and enforcing the principle of least privilege. Use this guide to ensure your LLM integrations meet strict data privacy standards (e.g., GDPR, HIPAA).

A specialized security auditor for Laravel applications. It analyzes code, APIs, and configurations against OWASP standards to detect vulnerabilities such as XSS, IDOR, SQL injection, and misconfigurations. Ideal for reviewing backend logic to ensure robust data protection and authorization.

This comprehensive checklist guides the deployment of AI agents into a live production environment. It covers critical areas including security best practices (API key management, SSO), robust error handling, monitoring setup, operational runbooks, and compliance adherence (HIPAA, GDPR). Use this when validating an agent for go-live to ensure maximum reliability and stability.

This guide details secure methods for connecting external applications to the Linear API. It covers essential security practices, including secure storage of API keys using environment variables, implementing OAuth 2.0 with PKCE for robust authentication, managing token refresh cycles, and verifying webhook signatures using HMAC-SHA256. Essential for building production-grade, secure integrations.

Implement robust, structured logging for API requests, capturing performance metrics, correlation IDs, and detailed security audit trails. This skill ensures compliance by handling PII redaction and providing comprehensive, JSON-formatted logs suitable for ELK Stack or Loki. Essential for debugging, performance analysis, and maintaining SOC 2 compliance in distributed microservices.