Skill UI

A comprehensive guide for authorized security assessments, detailing systematic methods to escalate user privileges from low-level access to root control on Linux systems. Techniques covered include comprehensive system enumeration, exploiting kernel vulnerabilities (e.g., dirty pipe), abusing misconfigured sudo permissions (using gtfobins), and exploiting vulnerable SUID binaries.

This comprehensive checklist guides developers and DevOps engineers through the necessary steps for deploying MaintainX integrations to a production environment. It covers crucial areas such as authentication security, error resilience (retry/circuit breaking), data integrity (idempotency, pagination), observability setup (logging/metrics), and modern deployment best practices, ensuring a stable and reliable go-live process.

This guide teaches comprehensive security hardening for API integrations. Learn best practices for credential management (using environment variables/secret managers), implementing git hooks to prevent secret leaks, robust input validation (using Zod), structured audit logging, and mandatory key rotation procedures, ensuring system compliance and operational security.

This guide details how to implement Role-Based Access Control (RBAC) and comprehensive workspace management for Mistral AI at the enterprise level. It covers creating scoped API keys, setting resource limitations (rate limits, model access), enforcing spending budgets, key auditing, and automating key rotation. It is essential for large organizations requiring strict governance, security, and cost control when integrating Mistral AI into production systems.

This expert specializes in secure mobile development practices, covering areas like input validation, WebView security, secure data storage (KeyStore/Keychain), and advanced network security (Certificate Pinning). Use this skill to write secure, resilient mobile code for both iOS and Android, mitigating platform-specific vulnerabilities and ensuring sensitive data protection.

This comprehensive skill profile models an expert network engineer specializing in modern cloud networking, security architectures, and performance optimization. It covers multi-cloud environments (AWS, Azure, GCP), advanced concepts like Zero Trust, Service Mesh (Istio), and high-availability design. Key capabilities include implementing IaC (Terraform), load balancing, DNS management, and deep network troubleshooting. Ideal for complex DevOps, SRE, or infrastructure design roles.

This comprehensive guide helps developers make critical architectural decisions in modern Node.js development. It covers framework selection (Fastify, Hono, Express), implementing layered architecture, mastering async patterns, robust error handling, and essential security protocols. The focus is on teaching architectural thinking and problem-solving skills, ensuring the development of scalable, high-performance, and maintainable backend APIs.

This comprehensive checklist guides the secure and compliant deployment of OpenEvidence, a clinical decision support system. It covers critical requirements for handling Protected Health Information (PHI), including HIPAA-grade security, robust API integration best practices, mandatory monitoring setup, and resilience testing. Use this guide to ensure your healthcare-adjacent system meets the highest standards of compliance and reliability.

This guide provides essential security protocols and coding best practices for integrating with OpenEvidence, a platform processing Protected Health Information (PHI). It covers mandatory topics such as HIPAA compliance, API key management, webhook signature verification, input validation, and data redaction, ensuring all interactions are secure and audit-compliant.

A comprehensive technical audit checklist designed to validate the production readiness of OpenRouter API integrations. It covers critical areas including security practices (e.g., secret management, key rotation), system reliability (e.g., fallbacks, retries, timeouts), and observability requirements (e.g., structured logging, cost tracking). Use this guide before launching or during major operational reviews to ensure robust, scalable, and compliant deployments.

A comprehensive specialist that combines automated static analysis (SonarQube, CodeQL, Semgrep) with advanced AI capabilities. This tool performs multi-layered code reviews assessing security vulnerabilities, performance bottlenecks, architectural coherence, and maintainability across various programming languages, integrating seamlessly into CI/CD pipelines.

Quick reference of PostgreSQL best practices covering indexing cheatsheets, data type choices, security policies, and configuration templates to guide optimization and troubleshooting workflows.