Skill UI

A comprehensive guide to configuring SaaS integrations (like Clay) across development, staging, and production environments. This skill outlines best practices for maintaining environment isolation by using separate tables, managing unique webhook URLs, and implementing environment-aware code guards to prevent data leakage and ensure system stability during deployment.

This comprehensive guide details how to configure Fireflies.ai across multiple isolated environments (Development, Staging, and Production). It emphasizes best practices for managing environment-specific secrets, API keys, and webhook URLs. By implementing robust environment separation, you can prevent data leakage and ensure that changes in one environment do not impact the stability or data integrity of others, which is crucial for CI/CD pipelines.

A comprehensive guide and implementation structure for configuring Instantly.ai across Development, Staging, and Production environments. This skill ensures strict workspace isolation by utilizing environment variables and dedicated workspaces, preventing accidental data leakage or incorrect live deployments during testing and iteration cycles. It covers secure key management and safe promotion workflows.

This comprehensive guide details the best practices for configuring Langfuse across development, staging, and production environments. It covers essential steps including environment-specific API key management, secret integration (AWS/GCP), and implementing reliable CI/CD pipelines to ensure data isolation and prevent cross-environment leakage, maintaining observability throughout the software lifecycle.

This guide details how to implement robust API schema validation using OpenAPI Specification (OAS) and JSON Schema. It enforces strict input/output contracts, preventing critical vulnerabilities such as injection attacks (SQLi, XSS), data leakage, and mass assignment by validating data types and structure at the API gateway or development level.

A comprehensive guide for intercepting and analyzing HTTP/HTTPS traffic from mobile applications using Burp Suite. This skill walks through configuring proxies on Android and iOS, handling CA certificate installation, and executing advanced penetration testing techniques. It is essential for assessing API security, identifying data leakage, and finding authentication vulnerabilities in mobile client-server communications.

This skill is designed for assessing the security of Android inter-process communication (IPC) by systematically testing intents, broadcast receivers, content providers, and exported components. It helps identify critical vulnerabilities such as intent injection, unauthorized data leakage, and component hijacking, which are crucial during mobile penetration testing and security audits.

This guide provides comprehensive patterns for designing and implementing secure multi-tenant SaaS applications using shared databases. It covers critical techniques like Row-Level Security (RLS) in PostgreSQL, implementing tenant-aware middleware in TypeScript (Express/Fastify), and enforcing data scoping at the ORM level (Prisma/Drizzle). Learn how to prevent data leakage and manage tenant isolation across shared schemas.

An automated verification system designed for critical healthcare application deployments (EMR/EHR). This harness enforces stringent patient safety standards by running multiple mandatory test gates, including Clinical Decision Support System (CDSS) accuracy, Protected Health Information (PHI) leakage prevention, and data integrity checks. A single failure in critical gates automatically blocks deployment, ensuring regulatory compliance and optimal patient safety in the CI/CD pipeline.

Provides comprehensive security guidelines for integrating Anthropic Claude API. Covers essential best practices including secure API key management (rotation, isolation), defending against prompt injection attacks by separating system instructions from user input, robust input sanitization, and output validation to prevent accidental data leakage. Essential for building production-grade, secure AI applications.

This comprehensive guide outlines essential security best practices for developing automation scripts that interact with Apple Notes on macOS. It covers critical areas such as managing TCC permissions, preventing data leakage, securely exporting content, and handling end-to-end encrypted notes (locked notes). Use this resource when building robust, secure, and compliant applications within the Apple ecosystem.

A comprehensive security auditing framework designed to systematically detect sensitive information disclosure from Large Language Models (LLMs). It uses multi-phase, escalating dialogue probes to test for leaks such as system prompts, API keys, PII, and internal configurations. Essential for red teaming and rigorous model security assessment.