Skill UI

A comprehensive guide to building, optimizing, and deploying production-grade Docker images and containers. Covers advanced concepts such as multi-stage builds, layer caching optimization, security hardening (non-root users, secrets), health checks, and effective volume/network configuration using docker-compose.

A comprehensive guide detailing essential security best practices for integrating with Documenso document signing. Covers critical topics such as secure API key management (using environment variables), robust webhook secret verification (preventing timing attacks), implementing least privilege document access control, and setting up secure self-hosted signing certificates and secrets.

Offers an automated Env Secret Detector assistant in the Security Fundamentals domain, providing guidance, patterns, validations, and ready-to-use code for detecting and preventing exposed secrets.

This skill provides a comprehensive guide to setting up Continuous Integration and Continuous Deployment (CI/CD) pipelines for applications integrating with Evernote. It covers advanced topics such as creating mock clients for deterministic unit testing, managing sandbox integration tests using GitHub Secrets, and structuring robust automated deployment workflows. Use this when ensuring code quality and reliable deployment for Evernote-based SaaS products.

Comprehensive guide for deploying Evernote integrations to robust production environments across major cloud platforms (AWS, GCP, Kubernetes). It covers advanced practices including multi-stage Docker builds, secure secrets management via Secret Manager, serverless function setup (Lambda), and configuring necessary health checks and CI/CD pipelines. Ideal for transitioning from testing to live deployment.

This guide details setting up robust Continuous Integration and Continuous Deployment (CI/CD) pipelines for Exa integrations. It covers unit tests, live integration testing using GitHub Actions secrets, and health checks. Use this when automating testing workflows or ensuring Exa API connectivity during builds and release gates.

A comprehensive guide for deploying web scraping applications powered by Firecrawl to various production environments. Covers Vercel serverless functions, Google Cloud Run, and self-hosted Docker setups. Learn how to configure platform-specific secrets, implement API routes, and handle asynchronous crawl results via webhooks for scalable, reliable production service.

This comprehensive guide details how to configure Fireflies.ai across multiple isolated environments (Development, Staging, and Production). It emphasizes best practices for managing environment-specific secrets, API keys, and webhook URLs. By implementing robust environment separation, you can prevent data leakage and ensure that changes in one environment do not impact the stability or data integrity of others, which is crucial for CI/CD pipelines.

A comprehensive guide for configuring API access across distinct environments (Development, Staging, Production) for SaaS services. It details architectural patterns for separating workspaces, managing environment-specific secrets (e.g., using AWS Secrets Manager), and implementing environment guards to ensure code behaves correctly and securely in different stages of deployment. Ideal for CI/CD pipeline setup and robust client-side configuration.

This comprehensive guide details how to set up robust CI/CD pipelines for projects integrating with Ideogram. It covers automated unit testing, optional integration tests using GitHub Secrets, and crucial prompt validation logic directly within GitHub Actions workflows, ensuring high code quality and reliable API interaction.

A comprehensive guide for configuring API access across development, staging, and production environments. This setup ensures strict isolation of API keys and environment-specific parameters (like models, speed, and caching). It covers best practices for secret management using major CI/CD and secret services (GitHub Actions, AWS Secrets Manager, GCP Secret Manager).

Detects fail-open insecure defaults such as hardcoded secrets, weak auth, or permissive security that allow production apps to run unsafely, guiding auditors through discovery, verification, confirmation, and reporting steps during security reviews or deployment validation.