Skill UI

A comprehensive SDK providing robust authentication credentials for Python applications interacting with Azure services. It simplifies secure access by supporting multiple credential types, including Managed Identity, Service Principal, and Azure CLI. Features like DefaultAzureCredential allow seamless authentication across local environments, CI/CD pipelines, and various Azure cloud deployments.

A comprehensive SDK providing robust authentication credentials for Python applications interacting with Azure services. It simplifies secure access by supporting multiple credential types, including Managed Identity, Service Principal, and Azure CLI. Features like DefaultAzureCredential allow seamless authentication across local environments, CI/CD pipelines, and various Azure cloud deployments.

This guide provides comprehensive best practices for securing Evernote API integrations. It covers essential topics like secure credential management using environment variables or vaults, implementing CSRF-protected OAuth flows, encrypting access tokens at rest using AES-256-GCM, rigorous input validation, and ensuring secure logging practices by redacting sensitive data. Use this when hardening your application against data breaches.

A comprehensive guide detailing how to set up secure API authentication for Kling AI using JSON Web Tokens (JWT). This process involves generating tokens from your Access Key (AK) and Secret Key (SK) credentials, providing code examples for Python and Node.js, and implementing best practices for token management and refreshing to ensure continuous API access.

This bundle collects comprehensive diagnostic evidence from the OpenEvidence clinical decision support API. It validates API credentials, checks query endpoint health, retrieves evidence citations, and captures model metadata. Use it to diagnose complex issues like query failures, missing references, or high latency without needing direct dashboard access.

A comprehensive guide to implementing secure secrets management practices for Continuous Integration/Continuous Deployment (CI/CD) pipelines. It covers using industry-leading tools like HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, and GCP Secret Manager to securely store, retrieve, and automatically rotate credentials (API keys, database passwords, TLS certificates) without hardcoding them into source code. Includes best practices for least-privilege access and audit logging.

This policy set establishes comprehensive guardrails for using AI coding assistants (like Windsurf/Cascade). It governs terminal commands, enforces workspace isolation (preventing access to secrets/credentials), and integrates CI/CD gates for code quality. Use this when setting up team development standards, mandatory code review policies for AI output, or implementing secure development pipelines.

Guides users through the AionUi Settings interface to enable WebUI, open remote access via LAN, Tailscale, or server deployment, fetch access credentials, and troubleshoot service issues without using the command line.

A comprehensive guide to configuring secure OAuth 2.0 authorization flows, covering best practices for Authorization Code with PKCE, Client Credentials, and Device Authorization Grant. Learn how to implement mandatory security controls, manage token lifecycles, and align with OAuth 2.1 standards to build robust identity and access management systems.

A comprehensive solution for identifying and preventing the accidental commitment of exposed AWS credentials, API keys, and session tokens within source code, configuration files, and git history. It integrates TruffleHog and git-secrets into CI/CD pipelines and pre-commit hooks, providing critical protection against credential theft and unauthorized cloud access in a DevSecOps environment. Essential for security auditing and compliance.

A comprehensive guide and workflow for the post-containment phase of incident response. This process details systematic methods for mapping all persistence mechanisms, identifying malware artifacts, removing threats, resetting compromised credentials, and patching initial access vulnerabilities to ensure complete system eradication.

This skill automates the process of testing for Broken Function Level Authorization (BFLA) vulnerabilities in APIs. It simulates attempts by low-privilege users to access or execute administrative functions and privileged endpoints by manipulating HTTP methods, paths, and credentials. It is essential for comprehensive API security audits and validating Role-Based Access Control (RBAC) enforcement.