Skill UI

This skill provides comprehensive governance for multi-user API deployments using OpenRouter. It covers key provisioning, including creating, listing, and revoking individual user keys. Users can set per-user budget limits and track usage costs programmatically. It is designed for corporate or team environments that require strict cost control, usage attribution, and detailed usage reporting.

This comprehensive guide provides developers with step-by-step instructions for migrating applications from direct calls to proprietary Large Language Model (LLM) APIs (such as OpenAI or Anthropic) to utilizing the unified OpenRouter gateway. It details essential code changes, including updating base URLs, managing API keys, adding custom headers, and correctly prefixing model identifiers. This ensures a seamless transition, enabling multi-model compatibility and simplified API management.

This guide provides comprehensive instructions for installing and configuring the Perplexity Sonar API authentication. It details setting up the necessary environment variables and using the standard OpenAI client library (for both Node.js and Python) to connect to Perplexity's API endpoint. Learning this process is essential for developers starting a new Perplexity integration, setting up API keys, or verifying API connectivity.

This skill provides a comprehensive guide to configuring the Perplexity Sonar API across distinct operational environments (development, staging, and production). It details how to manage environment-specific API keys, enforce tailored rate limits, select appropriate models (e.g., sonar vs. sonar-pro), and implement cost optimization strategies. Use this when migrating or integrating Perplexity search functionality into a multi-tier, production-grade application architecture.

This guide details implementing robust Role-Based Access Control (RBAC) within a PostHog Enterprise environment. It covers managing the three-level hierarchy (Organization > Project > Resource), assigning granular member roles (Owner, Admin, Member), configuring scoped API keys for secure integrations, and enforcing enterprise-grade authentication via SSO/SAML. Includes steps for setting up project permissions and auditing system changes.

This skill guides the complete setup and configuration of PostHog SDKs for modern applications. It covers best practices for implementing client-side (browser) and server-side (Node.js/Python) event tracking. Users will learn how to install the necessary SDKs via npm or pip, manage environment variables for both Project API Keys and secure Personal API Keys, and initialize the tracking service correctly to ensure accurate and reliable event capture in PostHog.

This guide outlines best practices for securing PostHog API keys. It differentiates between low-risk Project keys and high-privilege Personal keys, detailing methods for implementing least-privilege access, scoped key creation, secure rotation procedures, and leak prevention using environment variables, pre-commit hooks, and server-side isolation.

A comprehensive guide detailing security best practices for building and deploying applications on the Replit platform. Learn how to properly manage sensitive data using Replit Secrets (AES-256 encryption), implement secure service-to-service authentication via REPL_IDENTITY tokens, validate custom headers, and prevent common vulnerabilities like hardcoded API keys and SQL injection. Essential for auditing and securing production environments.

A comprehensive guide for diagnosing and resolving common technical errors in Retell AI voice agents. Covers issues such as 401 Unauthorized API keys, call failure formatting, function call timeouts, webhook event failures, and voice quality problems, providing actionable fixes and best practices for smooth implementation.

This skill provides implementation patterns for building robust and reliable AI voice agents and telephony automation systems using the Retell AI SDK. It covers best practices for handling common communication errors (like rate limiting or invalid API keys) and ensures stable interaction flow for voice-based applications and phone call automation scenarios.

Scans your codebase with pattern matching and entropy analysis to detect exposed secrets like API keys, passwords, and private keys, then generates remediation reports so you can fix vulnerabilities before committing or deploying code.

A comprehensive guide to implementing secure secrets management practices for Continuous Integration/Continuous Deployment (CI/CD) pipelines. It covers using industry-leading tools like HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, and GCP Secret Manager to securely store, retrieve, and automatically rotate credentials (API keys, database passwords, TLS certificates) without hardcoding them into source code. Includes best practices for least-privilege access and audit logging.