Skill UI

This framework implements robust input and output validation guardrails for LLM-powered applications. It prevents prompt injection, detects and redacts PII, filters toxic content, and validates model outputs against defined schemas. Use it when deploying AI agents that handle sensitive data or require strict adherence to corporate policies, ensuring a secure and trustworthy AI interaction layer.

This skill safely randomizes the order of repetitive JSON objects within an array without corrupting the data or breaking the JSON syntax. It acts as a data engineer, rigorously validating the input schema (checking for property consistency and lack of nesting) before performing the shuffle. It ensures data integrity is maintained while reordering records, making it ideal for testing, simulation, or data preparation workflows.

Provides comprehensive security guidelines for integrating Anthropic Claude API. Covers essential best practices including secure API key management (rotation, isolation), defending against prompt injection attacks by separating system instructions from user input, robust input sanitization, and output validation to prevent accidental data leakage. Essential for building production-grade, secure AI applications.

A comprehensive guide detailing security best practices for integrating and managing enterprise search with Glean. It covers critical topics such as indexing token management, validating webhook signatures, implementing input validation using Zod, and techniques for data redaction, ensuring that sensitive information is protected across the entire search lifecycle.

This guide details how to implement robust content safety guardrails for applications powered by Claude. It covers essential techniques such as system prompt hardening, input validation to detect injection patterns and length limits, and output validation to prevent system prompt leakage. It ensures compliance with Anthropic's policies, making the AI integration secure and reliable.

This comprehensive skill provides multi-layered guardrails for integrating with LLMs like Claude. It enforces security and compliance by implementing input validation (PII detection, length checks), system prompt restriction (scope control, safety rules), output filtering (preventing sensitive data leakage), cost governance, and model access policies. Ideal for building secure, robust, and governed AI applications.

This guide details essential best practices for securing applications integrated with Anthropic's Claude API. It covers critical security measures including secure API key management (server-side only), robust input validation to prevent cost attacks, defense mechanisms against prompt injection, and implementing per-user rate limiting. Essential reading for maintaining data privacy and system integrity in production environments.

This skill provides a comprehensive framework for conducting high-quality code reviews. It guides developers through checking code across four critical dimensions: Correctness (functional accuracy and edge cases), Maintainability (readability and documentation), Performance (efficiency and resource usage), and Security (input validation and vulnerability management). It also emphasizes providing actionable, constructive, and empathetic feedback.

Provides comprehensive security guidelines and code patterns for integrating with the Fathom API. This module covers critical security concerns such as API key management, webhook signature verification, PII (Personally Identifiable Information) redaction, and robust input validation. It ensures compliance and protects highly sensitive meeting transcripts and confidential business data in production environments.

A comprehensive guide for securing highly sensitive fundraising and investor data managed within the Finta platform. This document covers critical security best practices, including secure API key management, webhook signature verification, robust input validation using libraries like Zod, and techniques for data redaction to prevent leaks. Essential for developers building integrations that handle confidential financial terms, valuations, and investor contact information.

This skill provides comprehensive best practices for securing highly sensitive financial and tax data processed by SaaS platforms, such as handling SSNs, EINs, and bank details. It covers critical security mechanisms including API key lifecycle management, webhook signature verification (HMAC), robust input validation (Zod), and PII redaction to ensure compliance with standards like SOC 2 and industry best practices.

This comprehensive guide details essential security practices for deploying WebContainers. It covers implementing Content Security Policy (CSP) headers, ensuring robust sandbox isolation, and performing rigorous input validation to mitigate common web vulnerabilities. Use this when developing applications with WebContainers or the StackBlitz SDK.