Skill UI

This skill provides comprehensive linting and static analysis for Go projects using golangci-lint. It enforces numerous best practices, checks for common errors, manages configurations via `.golangci.yml`, and supports auto-fixing. Use it during the entire development lifecycle, including setting up CI/CD pipelines, running pre-commit checks, or refactoring large, legacy Go codebases to ensure high code quality and maintain security standards.

Implements automated, multi-layered policy enforcement and guardrails for Adobe integrations. This skill provides crucial security checks, including detecting sensitive credentials (e.g., p8_ secrets), pre-screening content for services like Firefly (blocking trademarks or explicit material), and enforcing usage quotas for PDF Services. It is essential for maintaining secure and compliant CI/CD pipelines.

A comprehensive guide and implementation for setting up Continuous Integration and Continuous Deployment (CI/CD) pipelines for dApps powered by Alchemy. It utilizes GitHub Actions to automate critical Web3 workflows, including running Hardhat tests against a mainnet fork, verifying smart contract integrity, and securely deploying to testnets like Sepolia. Features built-in key exposure scanning for robust security.

This guide outlines critical security best practices for design-to-code pipelines using Anima and Figma. It covers securing API credentials by restricting token scopes (e.g., read-only access for Figma), enforcing server-side execution for SDKs, and implementing robust secret management using cloud services like GCP Secret Manager. This minimizes the risk of credential leakage in CI/CD environments.

Implements automated policy enforcement and guardrails for Canva Connect API integrations. This system enforces best practices such as preventing hardcoded credentials, ensuring proper rate limit handling (429 responses), and validating robust OAuth configurations. It is essential for maintaining high code quality and security in CI/CD pipelines and pre-commit hooks.

Automated guardrails for enforcing security policies and coding standards across all Figma API integrations. This tool is essential for CI/CD pipelines, helping to prevent credential leaks (PATs), validate API scopes, enforce request best practices, and ensure stable, secure connectivity with Figma.

A comprehensive guide for implementing robust policy enforcement and security guardrails in HubSpot integrations. This methodology covers secret scanning within CI/CD pipelines to prevent token leaks, utilizes ESLint rules for enforcing modern authentication practices, and leverages TypeScript for compile-time and runtime checks. Use this when setting up secure, scalable, and compliant codebases for HubSpot APIs.

This skill provides a structured guide for setting up CI/CD pipelines to test Persona identity verification integrations. It demonstrates how to use sandbox API credentials, simulate webhooks, and run comprehensive integration tests. It is essential for developers ensuring the reliability and security of KYC/identity services before deployment.

This guide implements comprehensive policy guardrails for robust Salesforce integrations. It provides solutions for preventing SOQL injection vulnerabilities, detecting hardcoded credentials, throttling API usage at runtime, and enforcing code quality via custom ESLint rules and CI/CD checks. Use this when building secure, scalable, and compliant Salesforce applications.

A comprehensive guide and workflow for deploying static websites (e.g., Vue, React, Angular, Hugo, Jekyll) from a local environment to a production server using VSCode SFTP. This skill covers setting up secure SFTP connections, generating production-ready Nginx configurations (including security headers, caching, and HTTPS redirects), and providing a complete deployment checklist for smooth CI/CD-like workflows.

This comprehensive guide details advanced techniques for circumventing Content Security Policies (CSP). It covers exploiting weaknesses in critical directives (e.g., base-uri, object-src), abusing nonces, leveraging trusted CDN endpoints, and executing code despite strict controls like script-src 'self' or 'strict-dynamic'. Essential knowledge for deep security auditing and penetration testing.

A comprehensive playbook detailing expert-level techniques for exploiting web cache vulnerabilities. Covers both Web Cache Deception (stealing authenticated user data) and Web Cache Poisoning (injecting malicious content). Techniques include path confusion, unkeyed header manipulation (X-Forwarded-Host), and exploiting CDN/reverse proxy caching logic. Essential reading for penetration testers and security researchers.