Skill UI

Provides comprehensive security guidelines for integrating Anthropic Claude API. Covers essential best practices including secure API key management (rotation, isolation), defending against prompt injection attacks by separating system instructions from user input, robust input sanitization, and output validation to prevent accidental data leakage. Essential for building production-grade, secure AI applications.

This guide details securing the CAST AI integration across multiple layers. It covers best practices for API key management (including rotation and secrets storage), implementing least-privilege RBAC using 'kubectl', deploying the Kvisor security agent for runtime scanning, and setting up Kubernetes Network Policies to restrict egress traffic. Use this when hardening production clusters or performing security audits.

A comprehensive guide for rapid incident response when Algolia search functionality fails. This runbook provides structured procedures for triage, differentiating between infrastructure outages and internal configuration errors (e.g., API keys, indexing failures). It includes severity classification, diagnosis steps, and code examples for immediate remediation, such as key rotation or implementing circuit breakers.

This guide provides comprehensive security best practices for integrating with BambooHR. It covers crucial topics like robust API key management (including quarterly rotation procedures), implementing HMAC webhook signature verification to prevent data tampering, and detailed guidelines for handling sensitive PII data (SSN, salary) to ensure compliance and data integrity.

Detailed guide on securing Cohere API integration. Covers best practices for API key management (using environment variables), implementing mandatory key rotation procedures, scrubbing Personally Identifiable Information (PII), and ensuring secure logging practices, helping developers build production-ready, secure applications.

This guide provides comprehensive security standards for integrating with the Flexport API. It covers critical best practices such as webhook signature verification, secure API key rotation, implementing least-privilege access controls, and data redaction for handling sensitive logistics and customs data. Essential for maintaining compliance and preventing data breaches in supply chain operations.

A comprehensive checklist designed to validate that an Oracle Cloud Infrastructure (OCI) environment meets rigorous production-grade standards. This tool automates checks for critical security controls, including compartment isolation, backup policy enforcement, NSG/security list auditing, API key rotation status, encryption verification, and compliance monitoring via Cloud Guard. Use it when preparing an OCI environment for mission-critical workloads or conducting a formal security audit.

This guide details best practices for securing Persona identity verification implementations. It covers critical security measures such as API key rotation, webhook HMAC verification, encrypting Personally Identifiable Information (PII) at rest, and maintaining comprehensive audit logs. Use this when integrating Persona into a production system requiring high data security and compliance.

This guide details essential security best practices for Snowflake data warehouses. It covers implementing network policies, managing key rotation, enabling Multi-Factor Authentication (MFA), and securing credentials using secret managers. Use this comprehensive resource to audit security configurations, restrict network access, and enforce least-privilege access within your Snowflake environment.

This guide provides a comprehensive approach to securing AWS Identity and Access Management (IAM) configurations. It walks practitioners through inventorying existing permissions, using Access Analyzer to identify overly permissive policies, implementing specific resource scoping, and attaching permission boundaries. Key strategies include enforcing least privilege access, managing credential rotation, and meeting stringent compliance requirements like SOC 2 and PCI-DSS.