Skill UI

This guide details how to implement Role-Based Access Control (RBAC) and comprehensive workspace management for Mistral AI at the enterprise level. It covers creating scoped API keys, setting resource limitations (rate limits, model access), enforcing spending budgets, key auditing, and automating key rotation. It is essential for large organizations requiring strict governance, security, and cost control when integrating Mistral AI into production systems.

A comprehensive guide detailing essential security measures for integrating Mistral AI models. Covers API key management, defending against prompt injection, implementing content moderation, sanitizing outputs, and secure logging practices, ensuring robust and safe application development.

This comprehensive guide helps developers make critical architectural decisions in modern Node.js development. It covers framework selection (Fastify, Hono, Express), implementing layered architecture, mastering async patterns, robust error handling, and essential security protocols. The focus is on teaching architectural thinking and problem-solving skills, ensuring the development of scalable, high-performance, and maintainable backend APIs.

A comprehensive guide covering essential security practices for developing Obsidian plugins. Learn how to safely handle sensitive credentials (avoiding data.json), implement robust input validation, prevent Cross-Site Scripting (XSS), secure URI handlers, and adhere to modern Electron and Obsidian guidelines for data privacy and system integrity.

This comprehensive checklist guides the secure and compliant deployment of OpenEvidence, a clinical decision support system. It covers critical requirements for handling Protected Health Information (PHI), including HIPAA-grade security, robust API integration best practices, mandatory monitoring setup, and resilience testing. Use this guide to ensure your healthcare-adjacent system meets the highest standards of compliance and reliability.

This guide provides essential security protocols and coding best practices for integrating with OpenEvidence, a platform processing Protected Health Information (PHI). It covers mandatory topics such as HIPAA compliance, API key management, webhook signature verification, input validation, and data redaction, ensuring all interactions are secure and audit-compliant.

A comprehensive technical audit checklist designed to validate the production readiness of OpenRouter API integrations. It covers critical areas including security practices (e.g., secret management, key rotation), system reliability (e.g., fallbacks, retries, timeouts), and observability requirements (e.g., structured logging, cost tracking). Use this guide before launching or during major operational reviews to ensure robust, scalable, and compliant deployments.

Automates vulnerability scans for applications and APIs via the security-test-scanner plugin, covering OWASP Top 10, SQL injection, XSS, CSRF, authentication, and authorization weaknesses while generating detailed remediation reports.

This guide details how to implement Role-Based Access Control (RBAC) for Perplexity API in enterprise environments. Since Perplexity lacks native RBAC, the solution involves building a middleware gateway. This gateway enforces granular policies, including team-specific API key usage, model restriction (e.g., limiting access to 'sonar' only), budget caps, rate limiting, and mandatory search domain filtering for compliance and security.

Provides comprehensive security best practices for integrating the Perplexity API. This guide covers secure API key management using environment variables, critical query sanitization (stripping PII like emails, phone numbers, and credit cards), and implementing domain filters for compliance. Essential for developers building production applications that handle sensitive user data.

This guide outlines best practices for securing PostHog API keys. It differentiates between low-risk Project keys and high-privilege Personal keys, detailing methods for implementing least-privilege access, scoped key creation, secure rotation procedures, and leak prevention using environment variables, pre-commit hooks, and server-side isolation.

Provides red team workflows combining subdomain enumeration, live host discovery, technology fingerprinting, XSS hunting, API fuzzing, and automated recon scripting to support bug bounty hunters and security researchers.