Skill UI

Implements automated policy enforcement and guardrails for Canva Connect API integrations. This system enforces best practices such as preventing hardcoded credentials, ensuring proper rate limit handling (429 responses), and validating robust OAuth configurations. It is essential for maintaining high code quality and security in CI/CD pipelines and pre-commit hooks.

A comprehensive guide to securing ClickUp API usage. Learn best practices for managing API tokens, implementing least-privilege access, and auditing usage patterns. This includes secure token rotation procedures, using environment variables, setting up pre-commit hooks to prevent leaks, and structuring calls for robust audit logging.

Provides comprehensive guidelines for securing CoreWeave cloud deployments on Kubernetes. Covers critical security areas including credential management, implementing Role-Based Access Control (RBAC), enforcing network isolation policies, and handling sensitive secrets for ML model access. Essential for hardening GPU workloads and protecting data in cloud environments.

A comprehensive tool designed to scan any agent skill for potential security risks and vulnerabilities before implementation or use. Powered by local static analysis (A.I.G.), it ensures that no file contents, credentials, or personal data ever leave your device, providing maximum privacy and safety for integrating new AI capabilities across various agent platforms.

Automated guardrails for enforcing security policies and coding standards across all Figma API integrations. This tool is essential for CI/CD pipelines, helping to prevent credential leaks (PATs), validate API scopes, enforce request best practices, and ensure stable, secure connectivity with Figma.

This guide provides comprehensive security best practices for developers building with Framer. It covers secure credential management (like API keys and Site IDs), implementing the principle of least privilege, and securing plugins and Server API connections. Use this when auditing your Framer setup or ensuring production-level security for sensitive data handling.

This skill integrates Aegis detection events directly into Home Assistant. By firing specific `aegis_detection` events, it allows users to automate actions in their smart home setup. Users can configure automations to automatically turn on lights, send notifications, or execute complex routines based on detected security activity. Requires HA credentials for secure connection.

This guide details the security best practices for managing and using Hootsuite API credentials and tokens. It covers crucial topics such as secure storage of Client IDs, Client Secrets, and various tokens (Access/Refresh), emphasizing token rotation, implementing least privilege access, and securing OAuth 2.0 workflows in production environments.

A comprehensive guide for developers implementing secure integrations with Lucidchart. Covers critical security measures including OAuth2 client credential management, webhook signature verification (HMAC-SHA256), API version pinning, robust access control, and data redaction for handling sensitive diagrams and proprietary data.

A comprehensive checklist for validating the operational readiness of any Navan API integration before deployment to a live production environment. This guide covers critical areas including credential security (rotation, secret management), robust error handling, rate limit strategies, Single Sign-On (SSO) setup, data synchronization, and compliance auditing (PCI DSS, GDPR). Use this when ensuring mission-critical API stability.

A comprehensive guide to securing Navan integrations and API access. This skill covers OAuth 2.0 best practices, secure credential storage, automated credential rotation, configuring Single Sign-On (SSO) via SAML/OpenID Connect, and implementing automated user lifecycle management using SCIM provisioning. Essential for hardening enterprise-level integrations.

This guide provides comprehensive instructions on implementing secure authentication and managing the token lifecycle for the OneNote Graph API. It details the mandatory shift from deprecated app-only authentication to delegated authentication using MSAL, ensuring compliance with modern OAuth 2.0 standards. Key topics include establishing least-privilege permission scopes, handling token renewal, and securely storing credentials using environment variables or Azure Key Vault. Essential for developers building resilient and compliant OneNote integrations.