Skill UI

Automates Accredible Certificates operations through Composio’s Rube MCP workflows, guiding discovery, connection validation, and schema-compliant tool execution for credential-related tasks.

Comprehensive guide for authenticating to various Azure services using the official Azure Identity SDK in TypeScript. This SDK supports multiple credential types, including DefaultAzureCredential, Managed Identity, Service Principal (secrets/certificates), and integration with Azure CLI/PowerShell, ensuring secure and flexible authentication across local development, CI/CD, and cloud environments.

This is a comprehensive Rust SDK client library for interacting with Azure Key Vault Certificates. It enables developers to securely manage the entire certificate lifecycle, including creating new certificates, importing existing PFX/PEM files, retrieving details, updating policies, and safely deleting resources. Ideal for building robust, security-critical applications on Azure.

A comprehensive Python SDK guide for securely managing secrets, cryptographic keys, and certificates within Azure Key Vault. This tool allows developers to implement secure storage, perform cryptographic operations (encryption, decryption, signing, verification), and handle certificate lifecycle management, ensuring sensitive application data is protected across various development environments.

A comprehensive guide detailing essential security best practices for integrating with Documenso document signing. Covers critical topics such as secure API key management (using environment variables), robust webhook secret verification (preventing timing attacks), implementing least privilege document access control, and setting up secure self-hosted signing certificates and secrets.

Manages SSL/TLS certificates via the ssl-certificate-manager plugin by checking expiry dates, renewing certificates, listing installations, and reporting results to keep connections secure and troubleshooting informed.

This skill empowers users to manage and monitor critical SSL/TLS certificates using the built-in certificate manager. It provides capabilities to check certificate expiration dates, automate the renewal process for expired credentials, and list all installed certificates. It is essential for system administrators and developers maintaining secure, uninterrupted network connections and ensuring compliance.

A comprehensive guide to implementing secure secrets management practices for Continuous Integration/Continuous Deployment (CI/CD) pipelines. It covers using industry-leading tools like HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, and GCP Secret Manager to securely store, retrieve, and automatically rotate credentials (API keys, database passwords, TLS certificates) without hardcoding them into source code. Includes best practices for least-privilege access and audit logging.

Leverage Certificate Transparency (CT) logs via crt.sh and Certstream to proactively monitor for suspicious SSL/TLS certificates. This skill helps detect lookalike domains, unauthorized certificate issuance, and potential phishing infrastructure targeting your organization before attacks launch. Includes querying logic and threat intelligence integration.

A powerful security tool for querying Certificate Transparency (CT) logs via crt.sh and pycrtsh. It detects potential security threats such as phishing domains, unauthorized certificate issuance, and shadow IT infrastructure. The tool specifically monitors new certificates for typosquatting and brand impersonation using advanced distance metrics, enabling proactive security threat detection.

This guide details how to build and manage a robust two-tier Public Key Infrastructure (PKI) using OpenSSL. Learn to establish a Root CA and an Intermediate CA, issue server and client certificates, configure Certificate Revocation Lists (CRLs), and implement best practices for secure key management and certificate policy enforcement, ensuring compliance and high security standards.

This guide details the exploitation of the Active Directory Certificate Services (AD CS) ESC1 vulnerability. By leveraging misconfigurations, an attacker can request certificates impersonating high-privileged users (e.g., Domain Admins). The workflow covers AD enumeration, forging certificates with arbitrary Subject Alternative Names (SANs), authenticating via PKINIT, and ultimately escalating domain privileges using tools like mimikatz. Essential for authorized red team and penetration testing.