Skill UI

This skill guides the development of robust, security-focused full-stack web applications. It ensures layered security coverage across the entire application stack, from database queries (parameterized queries) to API endpoints (authentication/authorization) and frontend components (input validation, output encoding). Use this when building end-to-end features, microservices, or REST APIs that require simultaneous attention to Frontend, Backend, and Security best practices.

Automated fuzz testing of APIs via the /fuzz-api command to inject malformed, boundary, and random payloads, spotting crashes, SQL injection, XSS, and validation gaps during vulnerability scanning or security reviews.

This skill provides a robust framework for implementing Role-Based Access Control (RBAC) when integrating with Gamma API in enterprise or multi-tenant environments. Since Gamma's API key is workspace-level, this solution enforces granular, per-user permissions (Guest, Viewer, Editor, Admin) at the application layer. Key components include authorization middleware, multi-tenant isolation logic, usage quota management, and detailed audit logging, ensuring system security and compliance in large-scale deployments.

A comprehensive, multi-stage checklist designed to ensure that any third-party or internal integration is robust, secure, and fully functional before being deployed to a live production environment. It covers critical areas including API security, error handling, performance optimization, monitoring setup, and disaster recovery planning.

Provides comprehensive guidelines for securing API integrations with Gamma. Covers essential best practices such as using environment variables for API key storage, implementing key rotation strategies, request signing, and enforcing least privilege access control. Essential for developers building robust, production-grade applications.

A comprehensive reference architecture for deploying meeting intelligence platforms (like Granola) across large organizations. This blueprint details the core data capture pipeline, integration topology using middleware (Zapier), multi-workspace structure (Sales, HR, Engineering), and robust security layers (SSO, AES-256) to ensure automated workflows from meeting to action item across all departments.

This skill guides the design and implementation of complex GraphQL APIs. It specializes in schema design, utilizing Apollo Federation for distributed microservices, optimizing resolvers with DataLoader for N+1 prevention, and implementing real-time subscriptions. It covers security, complexity analysis, and adherence to best practices for building scalable, high-performance graph architectures.

A comprehensive guide detailing best practices for securing Groq API keys and managing data privacy. It covers critical steps such as using environment variables, implementing secure key rotation procedures, preventing key leaks via pre-commit hooks, and defending against prompt injection attacks for robust application development.

This guide outlines critical security measures for integrating with Guidewire systems, which handle sensitive policyholder PII, claims, and financial data. It covers best practices for implementing OAuth2 JWT authentication, API role scoping, input validation, and sensitive data redaction (PII) to prevent data breaches and meet compliance standards.

This guide details best practices for securing Ideogram API integrations. It covers essential steps like using environment variables for key storage, implementing key rotation procedures, establishing server-side proxies to prevent key exposure, and sanitizing prompts to mitigate data leaks. Use this when setting up, maintaining, or auditing API security infrastructure.

A comprehensive guide detailing security best practices for integrating with Instantly.ai. Learn how to implement least-privilege API scopes (e.g., campaigns:read), manage secrets using environment variables or dedicated secret managers, execute secure API key rotations, and validate incoming webhooks using custom headers. This skill is essential for developers building robust, secure, and scalable SaaS integrations.

This comprehensive checklist guides the operational validation of the Juicebox AI talent search and analysis platform in a production environment. It ensures system reliability, data security, and service continuity by reviewing critical areas such as API key management, rate limit handling, robust error detection (circuit breakers, exponential backoff), data encryption (GDPR/CCPA compliance), and comprehensive monitoring setup. It is essential for preventing service failures and maintaining search data integrity.