Skill UI

This guide details securing the CAST AI integration across multiple layers. It covers best practices for API key management (including rotation and secrets storage), implementing least-privilege RBAC using 'kubectl', deploying the Kvisor security agent for runtime scanning, and setting up Kubernetes Network Policies to restrict egress traffic. Use this when hardening production clusters or performing security audits.

A comprehensive guide detailing security best practices for the Hex data analytics platform. This covers secure API key management (read vs. run scopes), implementing least privilege access, validating webhooks, and redacting sensitive data from logs. Use this guide when auditing Hex security configuration or integrating secure data pipelines.

This skill helps test the robustness of an AI agent's authorization mechanisms. Use it when the agent handles user roles, permissions, or sensitive data (e.g., admin functions, cross-tenant data). It simulates attempts to bypass authentication, escalate privileges, or access data belonging to other users or tenants.

This guide outlines best practices for configuring and securing Adobe API access across Development, Staging, and Production environments. It details the use of separate Developer Console projects, implementing least-privilege OAuth scopes, and integrating robust secret management solutions (GCP Secret Manager, AWS Secrets Manager, HashiCorp Vault) into CI/CD pipelines for secure, scalable deployments.

A comprehensive guide to securing ClickUp API usage. Learn best practices for managing API tokens, implementing least-privilege access, and auditing usage patterns. This includes secure token rotation procedures, using environment variables, setting up pre-commit hooks to prevent leaks, and structuring calls for robust audit logging.

This comprehensive guide outlines essential security protocols for integrating with the Figma API. It covers best practices including securely storing Personal Access Tokens (PATs), implementing least-privilege scopes, managing token rotation lifecycles, and verifying incoming webhook payloads. Use this when setting up, auditing, or maintaining production-grade Figma integrations to ensure data integrity and prevent unauthorized access.

This guide provides comprehensive security standards for integrating with the Flexport API. It covers critical best practices such as webhook signature verification, secure API key rotation, implementing least-privilege access controls, and data redaction for handling sensitive logistics and customs data. Essential for maintaining compliance and preventing data breaches in supply chain operations.

This guide provides comprehensive security best practices for developers building with Framer. It covers secure credential management (like API keys and Site IDs), implementing the principle of least privilege, and securing plugins and Server API connections. Use this when auditing your Framer setup or ensuring production-level security for sensitive data handling.

This guide details the security best practices for managing and using Hootsuite API credentials and tokens. It covers crucial topics such as secure storage of Client IDs, Client Secrets, and various tokens (Access/Refresh), emphasizing token rotation, implementing least privilege access, and securing OAuth 2.0 workflows in production environments.

This skill demonstrates how to implement robust Role-Based Access Control (RBAC) within HubSpot integrations. It covers best practices for managing permissions using OAuth scopes, configuring multiple private apps for different access levels (Reader, Writer, Admin), and implementing application-level middleware to enforce least privilege access across CRM objects.

A comprehensive guide to securing HubSpot API integrations. Details best practices for implementing least-privilege scopes, securely managing access tokens in environment variables, validating webhook signatures (v3), and executing proper token rotation procedures. Essential knowledge for building robust and secure applications connected to HubSpot.

This comprehensive guide outlines essential security best practices for integrating with Intercom. It covers secure token storage, robust webhook signature verification (X-Hub-Signature), implementing Identity Verification, and adhering to least-privilege OAuth scopes. Use this guide when building secure, production-ready applications that interact with Intercom APIs.