Skill UI

A comprehensive SDK providing robust authentication credentials for Python applications interacting with Azure services. It simplifies secure access by supporting multiple credential types, including Managed Identity, Service Principal, and Azure CLI. Features like DefaultAzureCredential allow seamless authentication across local environments, CI/CD pipelines, and various Azure cloud deployments.

A comprehensive SDK providing robust authentication credentials for Python applications interacting with Azure services. It simplifies secure access by supporting multiple credential types, including Managed Identity, Service Principal, and Azure CLI. Features like DefaultAzureCredential allow seamless authentication across local environments, CI/CD pipelines, and various Azure cloud deployments.

This guide provides comprehensive best practices for securing Evernote API integrations. It covers essential topics like secure credential management using environment variables or vaults, implementing CSRF-protected OAuth flows, encrypting access tokens at rest using AES-256-GCM, rigorous input validation, and ensuring secure logging practices by redacting sensitive data. Use this when hardening your application against data breaches.

A comprehensive guide detailing how to set up secure API authentication for Kling AI using JSON Web Tokens (JWT). This process involves generating tokens from your Access Key (AK) and Secret Key (SK) credentials, providing code examples for Python and Node.js, and implementing best practices for token management and refreshing to ensure continuous API access.

This bundle collects comprehensive diagnostic evidence from the OpenEvidence clinical decision support API. It validates API credentials, checks query endpoint health, retrieves evidence citations, and captures model metadata. Use it to diagnose complex issues like query failures, missing references, or high latency without needing direct dashboard access.

A comprehensive guide to implementing secure secrets management practices for Continuous Integration/Continuous Deployment (CI/CD) pipelines. It covers using industry-leading tools like HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, and GCP Secret Manager to securely store, retrieve, and automatically rotate credentials (API keys, database passwords, TLS certificates) without hardcoding them into source code. Includes best practices for least-privilege access and audit logging.

This policy set establishes comprehensive guardrails for using AI coding assistants (like Windsurf/Cascade). It governs terminal commands, enforces workspace isolation (preventing access to secrets/credentials), and integrates CI/CD gates for code quality. Use this when setting up team development standards, mandatory code review policies for AI output, or implementing secure development pipelines.

Guides users through the AionUi Settings interface to enable WebUI, open remote access via LAN, Tailscale, or server deployment, fetch access credentials, and troubleshoot service issues without using the command line.

This tool parses API Gateway access logs from various providers (AWS, Kong, Nginx). It performs statistical analysis using pandas to detect critical security threats such as Broken Object Level Authorization (BOLA/IDOR), credential stuffing, rate limit bypass attempts, and injection vulnerabilities. Ideal for SOC analysts or security engineers investigating API abuse and building advanced threat detection rules.

A comprehensive guide to configuring secure OAuth 2.0 authorization flows, covering best practices for Authorization Code with PKCE, Client Credentials, and Device Authorization Grant. Learn how to implement mandatory security controls, manage token lifecycles, and align with OAuth 2.1 standards to build robust identity and access management systems.

Utilizes User and Entity Behavior Analytics (UEBA), statistical baselines, and machine learning models to monitor authentication logs. This skill identifies sophisticated security threats such as impossible travel, credential stuffing, brute force attacks, and compromised accounts in real-time. Essential for security operations and identity access management.

A comprehensive solution for identifying and preventing the accidental commitment of exposed AWS credentials, API keys, and session tokens within source code, configuration files, and git history. It integrates TruffleHog and git-secrets into CI/CD pipelines and pre-commit hooks, providing critical protection against credential theft and unauthorized cloud access in a DevSecOps environment. Essential for security auditing and compliance.