Skill UI

A comprehensive guide and implementation for setting up Continuous Integration and Continuous Deployment (CI/CD) pipelines for dApps powered by Alchemy. It utilizes GitHub Actions to automate critical Web3 workflows, including running Hardhat tests against a mainnet fork, verifying smart contract integrity, and securely deploying to testnets like Sepolia. Features built-in key exposure scanning for robust security.

A comprehensive checklist and script to validate the production readiness of decentralized applications (dApps) powered by Alchemy. It covers critical security best practices, API infrastructure validation, smart contract deployment checks, and performance optimization, ensuring a stable and secure mainnet launch.

A comprehensive guide to securing Web3 applications utilizing Alchemy. It covers critical best practices, including implementing secure API key proxies, managing private keys via secret vaults, validating blockchain inputs (addresses, block numbers), and verifying webhook signatures to harden your dApp infrastructure.

This guide outlines critical security best practices for design-to-code pipelines using Anima and Figma. It covers securing API credentials by restricting token scopes (e.g., read-only access for Figma), enforcing server-side execution for SDKs, and implementing robust secret management using cloud services like GCP Secret Manager. This minimizes the risk of credential leakage in CI/CD environments.

This comprehensive skill provides multi-layered guardrails for integrating with LLMs like Claude. It enforces security and compliance by implementing input validation (PII detection, length checks), system prompt restriction (scope control, safety rules), output filtering (preventing sensitive data leakage), cost governance, and model access policies. Ideal for building secure, robust, and governed AI applications.

This guide provides essential security practices for integrating with the AppFolio platform. It covers secure API credential management, implementing robust webhook signature verification, validating incoming tenant data payloads, and redacting sensitive PII (like SSNs and bank accounts) from logs. Use this when building integrations that handle owner or tenant financial data to ensure compliance and prevent data breaches.

Provides comprehensive security best practices for integrating AssemblyAI into production applications. This guide covers secure API key management (using environment variables), generating temporary tokens for browser streams, implementing PII redaction, managing data retention, and enabling content safety checks for compliance and security.

This guide provides comprehensive security best practices for integrating with BambooHR. It covers crucial topics like robust API key management (including quarterly rotation procedures), implementing HMAC webhook signature verification to prevent data tampering, and detailed guidelines for handling sensitive PII data (SSN, salary) to ensure compliance and data integrity.

This skill provides a comprehensive guide to implementing and managing BambooHR webhooks. It covers both global and permissioned webhook types, detailing the process from API setup to robust payload handling. Key security aspects include HMAC-SHA256 signature validation for ensuring data integrity and authenticity. Ideal for developers needing to build real-time employee synchronization triggers, process employee creation, updates, or deletions, and integrate BambooHR data into other enterprise systems.

This guide outlines security best practices for managing Bright Data zone credentials, API tokens, and webhooks. It covers crucial steps like credential inventory, environment variable security, zone isolation across environments, scheduled credential rotation, and implementing pre-commit hooks to prevent sensitive data leakage, maximizing data security and compliance.

This tool provides comprehensive integration for Reolink security cameras, supporting both RTSP streaming and HTTP API access. It allows users to discover cameras via ONVIF, capture live streams, take snapshots, and even capture motion-triggered video clips. It is ideal for developers building robust, networked surveillance or monitoring systems.

Implements automated policy enforcement and guardrails for Canva Connect API integrations. This system enforces best practices such as preventing hardcoded credentials, ensuring proper rate limit handling (429 responses), and validating robust OAuth configurations. It is essential for maintaining high code quality and security in CI/CD pipelines and pre-commit hooks.