Skill UI

A comprehensive guide for engineers, architects, and DevOps teams on implementing General Data Protection Regulation (GDPR) best practices. This skill covers Privacy by Design, data minimization, purpose limitation, retention policies, secure API design, and compliant logging practices. Use it when handling any personal data, designing new features, or reviewing systems for data privacy compliance.

Defines Salesforce Lightning Web Component, Aura, and Visualforce quality/security standards covering SLDS 2 styling, accessibility (WCAG 2.1 AA), data access patterns, component communication rules, XSS/CSRF protections, view state management, and Jest testing requirements for guided UI development and reviews.

This guide provides essential security practices for integrating with the AppFolio platform. It covers secure API credential management, implementing robust webhook signature verification, validating incoming tenant data payloads, and redacting sensitive PII (like SSNs and bank accounts) from logs. Use this when building integrations that handle owner or tenant financial data to ensure compliance and prevent data breaches.

A comprehensive guide detailing security best practices for integrating with ElevenLabs. It covers secure API key management using environment variables, implementing Git pre-commit hooks, and demonstrating robust webhook signature verification using HMAC-SHA256. This ensures secure data handling, replay protection, and proper voice data governance.

This comprehensive guide details the process of implementing a secure and robust system for handling Palantir Foundry webhook events. It covers key steps including API-based webhook registration, mandatory signature verification with replay protection, sophisticated event routing for various object lifecycles (create, update, delete), and ensuring idempotent processing using caching mechanisms like Redis. Use this when external microservices must react reliably and immediately to changes within the Foundry Ontology or data assets.

This comprehensive skill provides a robust framework for receiving and processing SalesLoft webhooks in real-time. It includes critical logic for HMAC-SHA256 signature verification and replay protection. The system efficiently routes various sales events (e.g., email opened, call completed, person updated) to sync data with external CRMs or operational systems, while ensuring data integrity through idempotency checks using Redis.

This skill details how to abuse the Windows DPAPI (Data Protection API) to extract and decrypt sensitive secrets protected by the OS. It covers multiple scenarios: online decryption (using the target user's context), offline decryption (requiring passwords or NTLM hashes), and advanced domain-wide decryption via the DPAPI backup key. Essential for red-teaming and post-exploitation activities to harvest credentials, browser logins, and Wi-Fi passwords.

Implements comprehensive runtime safety defenses for Large Language Model (LLM), RAG, and agent applications. This skill integrates industry-leading guardrail systems—including Llama Guard 3, NeMo Guardrails, and LLM Guard—to inspect and constrain all input and output data. It is essential for production environments requiring protection against adversarial attacks such as jailbreaks, prompt injection (OWASP LLM01), toxic content, and sensitive data leakage.

Provides security guidelines and best practices for LLM-based trading agents, covering risk management, data protection, and safe deployment.

A comprehensive guide for preparing scholarly manuscripts involving spatial data. It outlines best practices for documenting data provenance (sources, projections, processing chains), ensuring reproducibility, and adhering to critical ethical standards such as geoprivacy and human-subjects protection. Essential for maintaining research integrity in academic publishing.

Analyses contracts for risk across five critical clauses: Limitation of Liability, Indemnities, IP Ownership, Data Protection, Termination. Designed for founders without legal backgrounds. Flags red flags, explains risks in plain English, and provides negotiation guidance for vendor and partnership agreements.

Expert advisor on India's Digital Personal Data Protection Act, 2023 (DPDPA) and DPDP Rules 2025. Assists legal, privacy, and compliance teams with gap analysis, notice drafting, consent mechanisms, data principal rights, significant data fiduciary obligations, breach notification, and cross-border data transfer compliance.