Skill UI

Automate the rotation of sensitive credentials, including RDS database passwords, API keys, and OAuth tokens, using AWS Secrets Manager and Lambda. This skill ensures secure credential lifecycle management, helping maintain system security and compliance by automatically updating credentials for various AWS and third-party services.

A comprehensive runbook for rapidly responding to Fireflies.ai integration failures. Provides structured triage steps, P1-P4 severity assessment, and detailed remediation guides for common issues like API key expirations, rate limiting, and webhook discrepancies. Essential for on-call engineers during platform outages.

A comprehensive, step-by-step checklist for deploying Fireflies.ai integrations to a live production environment. This guide ensures API key management, webhook setup, robust health checks (including a TypeScript example), continuous monitoring, and a defined rollback procedure are all executed correctly for a successful go-live.

This comprehensive runbook guides incident response for Groq API failures. It covers triage steps, severity classification (P1-P4), troubleshooting decision trees (e.g., handling 429 errors or 5xx outages), and implementing immediate mitigations like model fallback or key rotation. Use this when responding to Groq outages to restore service stability.

This guide details setting up enterprise-grade access control for Langfuse. Learn how to configure role-based permissions (Owner, Admin, Member), implement scoped API keys, integrate SSO (SAML/OIDC), and set up comprehensive audit logging. It is essential for managing multi-team isolation and ensuring compliance in production environments.

This comprehensive runbook provides step-by-step procedures for managing MaintainX integration failures. It guides users through severity classification, immediate triage, root cause analysis, and mitigation strategies (such as key rotation or request buffering). The playbook ensures systematic incident response, verification of recovery, and proper post-mortem documentation for rapid system restoration.

This skill guides the implementation of comprehensive, real-time monitoring for APIs. It covers collecting key metrics (latency, error rates, request rate), setting up health and readiness endpoints, building detailed Grafana dashboards, and implementing SLO-based alerting (following the RED method). Use this when you need to ensure API reliability, high availability, and performance in a production environment.

This skill guide details the implementation of envelope encryption using AWS Key Management Service (KMS). It outlines the secure process of using a Data Encryption Key (DEK) to encrypt data locally, and subsequently protecting that DEK with a KMS-managed Key Encryption Key (KEK). This method is crucial for encrypting large data volumes on AWS, significantly reducing direct KMS API calls, improving performance, and maintaining compliance with strict security standards.

Implement robust, phishing-resistant authentication using FIDO2/WebAuthn standards. This guide covers integrating WebAuthn APIs, configuring FIDO2 servers, managing passkey enrollment, and migrating systems away from traditional passwords. Essential for meeting high-assurance security standards like NIST SP 800-63B AAL3.

This tool facilitates interactive dynamic malware analysis using the ANY.RUN cloud sandbox. It allows analysts to detonate suspicious samples, observe real-time execution behavior, and manually interact with prompts (like dialogs or CAPTCHAs). Key outputs include detailed process trees, network traffic analysis (C2 communication), and identification of all Indicators of Compromise (IOCs), mapping observed behaviors to MITRE ATT&CK. Essential for rapid, sophisticated behavioral analysis without maintaining local sandbox infrastructure.

A comprehensive guide for performing authorized security assessments on GraphQL APIs. This skill covers key areas such as endpoint discovery, schema introspection, testing for authorization flaws (BOLA/BFLA), injection vulnerabilities (SQL/NoSQL), and denial-of-service risks. Essential for penetration testers and bug bounty researchers targeting modern web applications.

A comprehensive security script designed to test REST API authentication mechanisms for common vulnerabilities. It assesses broken token validation, missing authentication on critical endpoints, weak password policies, and session management flaws. The tool specifically evaluates JWT implementation, API key handling, and adherence to OWASP API Security Top 10, helping identify authentication bypasses before production deployment.