Skill UI

A comprehensive guide for developers on building secure and robust APIs across REST, GraphQL, and WebSocket protocols. It covers essential security patterns including robust authentication (JWT, OAuth 2.0), granular authorization (RBAC), input validation to prevent injection attacks (SQLi, XSS), rate limiting, and best practices for data encryption and secure headers. Essential for developers preparing for security audits.

Implements enterprise-grade Role-Based Access Control (RBAC) for Apollo.io API integrations. This skill is essential for managing team permissions, ensuring data segregation, and implementing robust security controls by proxying API calls. It defines granular roles (Viewer, Analyst, Admin) and maps specific API operations to required permissions, preventing all-or-nothing key usage.

This skill automates the validation of AWS environments against critical industry compliance benchmarks. It performs detailed checks for CIS AWS Foundations, PCI-DSS, HIPAA, and SOC 2 standards, covering key areas like Identity and Access Management (IAM), logging, data protection, and network security. Essential for preparing for regulatory audits and maintaining continuous secure operations.

A comprehensive guide covering advanced offensive techniques for AWS cloud environments. Techniques include detailed IAM enumeration, privilege escalation paths, SSRF exploitation targeting metadata endpoints (IMDSv1/v2), S3 bucket exploitation, and Lambda function code extraction. Essential for security professionals and red team operations conducting authorized cloud vulnerability assessments.

Automate the rotation of sensitive credentials, including RDS database passwords, API keys, and OAuth tokens, using AWS Secrets Manager and Lambda. This skill ensures secure credential lifecycle management, helping maintain system security and compliance by automatically updating credentials for various AWS and third-party services.

This comprehensive skill provides a security posture assessment for AWS environments. It uses AWS CLI commands to audit critical security areas, including IAM policy review, network security groups, data encryption status (EBS, S3, RDS), and logging mechanisms (CloudTrail, VPC Flow Logs). Use this to proactively identify misconfigurations and ensure adherence to security best practices and compliance standards.

Utilize the Azure Key Vault Keys Java SDK to perform comprehensive key lifecycle management and cryptographic operations. This guide covers creating, retrieving, updating, and deleting various key types (RSA, EC, Symmetric) in both standard Azure Key Vault and Managed HSM. It demonstrates key operations such as encryption, decryption, signing, and verifying data using Java.

This SDK provides comprehensive Java support for managing secrets within Azure Key Vault. It enables developers to securely store, retrieve, update, list, delete, and recover sensitive configuration data, such as API keys, database passwords, and connection strings. It is essential for building secure, production-ready applications that comply with best security practices.

Search, filter, and extract data from Burp Suite .burp files via the burpsuite-project-file-parser CLI wrapper, letting you fetch targeted headers, audit findings, or traffic snippets without loading the GUI when hunting for security issues.

This skill provides a comprehensive checklist for performing rigorous code security reviews. It covers critical areas such as secrets management, input validation, preventing SQL injection, secure authentication (JWT, RLS), and mitigating XSS/CSRF vulnerabilities. Essential for developers building features that handle sensitive data or user input.

An expert developer specializing in secure backend coding practices, vulnerability mitigation, and robust API design. Proficient in preventing common attacks such as SQL injection, XSS, and CSRF. Covers comprehensive areas including input validation, authentication mechanisms (OAuth 2.0, MFA), database security, and implementing necessary security headers (CSP, HSTS) for building secure-by-design applications. Ideal for implementing security fixes or building new, hardened backend services.

A comprehensive guide to setting up robust Role-Based Access Control (RBAC) and governance within enterprise data workspaces like Clay. Learn how to define specific user roles (Admin, Member, Viewer), allocate team credit budgets, isolate API keys, and conduct quarterly access audits to maintain data security and operational efficiency for large teams.