Skill UI

This is a comprehensive Rust SDK client library for interacting with Azure Key Vault Certificates. It enables developers to securely manage the entire certificate lifecycle, including creating new certificates, importing existing PFX/PEM files, retrieving details, updating policies, and safely deleting resources. Ideal for building robust, security-critical applications on Azure.

A comprehensive Python SDK guide for securely managing secrets, cryptographic keys, and certificates within Azure Key Vault. This tool allows developers to implement secure storage, perform cryptographic operations (encryption, decryption, signing, verification), and handle certificate lifecycle management, ensuring sensitive application data is protected across various development environments.

Automate Digicert workflows through Composio’s Rube MCP, guiding tool discovery, connection checks, multi-tool execution, schema compliance, and session/memory threading for secure certificate management.

A comprehensive guide detailing essential security best practices for integrating with Documenso document signing. Covers critical topics such as secure API key management (using environment variables), robust webhook secret verification (preventing timing attacks), implementing least privilege document access control, and setting up secure self-hosted signing certificates and secrets.

Manages SSL/TLS certificates via the ssl-certificate-manager plugin by checking expiry dates, renewing certificates, listing installations, and reporting results to keep connections secure and troubleshooting informed.

A comprehensive guide to implementing Mutual TLS (mTLS) for achieving zero-trust, secure service-to-service communication within a service mesh. This skill provides templates and concepts for configuring mTLS using industry standards like Istio, Cert-Manager, and SPIFFE/SPIRE, ensuring robust certificate management and encrypted internal communication.

A comprehensive guide to implementing secure secrets management practices for Continuous Integration/Continuous Deployment (CI/CD) pipelines. It covers using industry-leading tools like HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, and GCP Secret Manager to securely store, retrieve, and automatically rotate credentials (API keys, database passwords, TLS certificates) without hardcoding them into source code. Includes best practices for least-privilege access and audit logging.

This guide details how to implement HashiCorp Vault's dynamic secrets engine. It automates the generation, lease management, and rotation of short-lived credentials for databases (e.g., PostgreSQL, MySQL), AWS IAM, and PKI certificates. This method eliminates the use of static, hardcoded secrets, enforcing zero-trust principles and meeting stringent compliance mandates like PCI-DSS.

A comprehensive guide for implementing SAML 2.0 Single Sign-On (SSO) using Okta as the Identity Provider (IdP). This skill covers end-to-end configuration, including SP-initiated and IdP-initiated flows, secure attribute mapping, advanced certificate management (SHA-256, AES-256), and security hardening practices required for enterprise-grade identity access management (IAM) deployments. Learn to establish robust and compliant authentication architecture.

This skill automates the entire SSL/TLS certificate lifecycle, including generating Certificate Signing Requests (CSRs), issuing, deploying, monitoring, renewing, and revoking X.509 certificates. Using Python and the ACME protocol, it ensures continuous security by preventing outages caused by certificate expiry, making it vital for building robust, automated PKI and security workflows.

This comprehensive guide provides essential security best practices for deploying applications on Fly.io. It covers critical areas such as secrets management, private networking using WireGuard, securing TLS certificates, and properly scoping deploy tokens. The included functions demonstrate how to validate API tokens, verify webhook signatures, and validate deployment configurations to mitigate common cloud and application-level vulnerabilities.

This skill guides the implementation of dynamic secrets using HashiCorp Vault. It focuses on generating short-lived, ephemeral credentials for services like databases (PostgreSQL, MySQL), AWS IAM, and PKI certificates. By automating credential generation, lease management, and rotation, it eliminates the risk associated with storing long-lived static secrets, ensuring compliance with zero-trust security models (PCI-DSS, NIST).