Skill UI

This guide outlines best practices for securing PostHog API keys. It differentiates between low-risk Project keys and high-privilege Personal keys, detailing methods for implementing least-privilege access, scoped key creation, secure rotation procedures, and leak prevention using environment variables, pre-commit hooks, and server-side isolation.

A comprehensive guide to implementing secure secrets management practices for Continuous Integration/Continuous Deployment (CI/CD) pipelines. It covers using industry-leading tools like HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, and GCP Secret Manager to securely store, retrieve, and automatically rotate credentials (API keys, database passwords, TLS certificates) without hardcoding them into source code. Includes best practices for least-privilege access and audit logging.

This guide details how to configure the Speak language learning platform across multiple environments (dev, staging, production). It is essential for implementing robust SaaS deployments, ensuring that separate API keys, mock modes, and environment variables are correctly managed for seamless development and operational management.

Implements a robust, enterprise-grade Role-Based Access Control (RBAC) system for Supabase. This skill teaches how to store custom roles (e.g., admin, editor, viewer) in JWT claims (`app_metadata`), enforce granular permissions, and scope access at the row level using PostgreSQL RLS policies. It covers organization scoping, role hierarchy management, and API key protection.

This skill provides robust guidelines and patterns for managing environment variables and sensitive credentials securely. It is designed to ensure that secrets, API keys, and other confidential information are never accidentally exposed or logged in Claude sessions, terminal outputs, development logs, or version control commits (like Git). Use this skill when handling sensitive data in development workflows to maintain maximum security.

A comprehensive guide to installing and configuring the Vast.ai Command Line Interface (CLI) and REST API access. This skill is used for setting up new cloud integrations, managing API keys, and initializing access to GPU compute instances from the Vast.ai marketplace. It provides steps for CLI authentication, environment variable setup, and implementing a Python client for resource management.

This guide details how to implement environment isolation (dev, staging, prod) for GPU cloud deployments on Vast.ai. It uses environment variables and configuration classes to enforce separate API keys, budget caps, instance limits, and GPU whitelists for each deployment tier, ensuring efficient resource management and cost control.

This comprehensive guide outlines security best practices for utilizing Vast.ai's cloud environment. It covers secure API key management, hardening SSH access to GPU instances, implementing proper data cleanup before instance destruction, and adhering to robust network security protocols. Use this when setting up, auditing, or deploying sensitive AI/ML workloads on shared cloud hardware.

This skill provides complete, programmatic integration with the protocols.io API v3, enabling advanced management of scientific protocols. Use it for the entire protocol lifecycle, including discovery by DOI or keywords, creating new protocols, managing steps and materials, coordinating collaborative development, organizing workspaces, and tracking experiments. It covers authentication, file handling, and discussion management, making it ideal for automated lab workflows and scientific documentation systems.

Varlock provides secure, default environment variable management, ensuring that sensitive secrets (like API keys and passwords) are never exposed in logs, terminal output, or the AI context. It validates environments, reads schemas, and executes commands in a secure manner, promoting best practices for handling secrets in modern development workflows.

Implements comprehensive security controls for the entire API key lifecycle, including secure generation, hashing, storage, rotation, and revocation. This skill involves designing keys with sufficient entropy, enforcing per-key scoping, setting rate limits, and building automated workflows to prevent leakage and unauthorized access. Essential for robust server-to-server authentication.

A comprehensive security script designed to test REST API authentication mechanisms for common vulnerabilities. It assesses broken token validation, missing authentication on critical endpoints, weak password policies, and session management flaws. The tool specifically evaluates JWT implementation, API key handling, and adherence to OWASP API Security Top 10, helping identify authentication bypasses before production deployment.