Skill UI

This guide provides a comprehensive, step-by-step tutorial for setting up OAuth2 client credentials authentication for the Ramp API. It covers obtaining necessary API credentials, configuring the environment for both sandbox and production, and utilizing Python code to successfully acquire an access token and verify connectivity. This is essential for developers needing to integrate financial data, manage corporate cards, or synchronize expense records using Ramp's services.

This guide provides a comprehensive walkthrough for setting up secure API access to the SalesLoft REST API v2. It covers multiple authentication methods, including OAuth 2.0 flows (Authorization Code and Client Credentials) and API Key usage. Use this when integrating SalesLoft features into external applications, scripts, or automated workflows.

This skill provides comprehensive guidance on implementing security best practices for Shopify applications. It covers critical topics such as secure API credential storage, verifying incoming webhooks using HMAC signatures, enforcing least-privilege access scopes, and setting Content Security Policies (CSP). Use this guide when building, auditing, or scaling a secure e-commerce integration.

This guide details essential security best practices for Snowflake data warehouses. It covers implementing network policies, managing key rotation, enabling Multi-Factor Authentication (MFA), and securing credentials using secret managers. Use this comprehensive resource to audit security configurations, restrict network access, and enforce least-privilege access within your Snowflake environment.

This comprehensive playbook guides the testing of Cross-Origin Resource Sharing (CORS) misconfigurations. It focuses on detecting critical vulnerabilities such as reflected origins, wildcard trust misuse, credentialed cross-origin reads, and bypasses in origin allowlists. Use this when analyzing browser-based access and trust boundaries for authenticated APIs.

This guide outlines a comprehensive workflow for detecting and preventing the exposure of sensitive AWS credentials (access keys, session tokens) within source code repositories, CI/CD pipelines, and configuration files. It utilizes TruffleHog for deep historical scanning and integrates git-secrets for robust pre-commit hooks, significantly reducing the risk of credential theft and unauthorized account access.

This skill guides the deployment and strategic use of honeytokens and canarytokens (decoy credentials, files, URLs, etc.). These high-fidelity decoys are designed to detect unauthorized access, insider threats, or adversary reconnaissance by triggering alerts upon any interaction, providing early warning deep within the kill chain.