Skill UI

The API Design Reviewer provides comprehensive automated analysis of REST API designs using OpenAPI specifications. It performs linting for convention adherence, detects breaking changes between versions, and generates a design scorecard across consistency, security, and usability. Ideal for reviewing PRs, auditing API migrations, or establishing robust development standards.

Automates api key manager support within the Security Fundamentals area, offering guidance, secure patterns, production-ready examples, and validation of outputs whenever api key manager context is mentioned.

Automates api key manager support within the Security Fundamentals area, offering guidance, secure patterns, production-ready examples, and validation of outputs whenever api key manager context is mentioned.

A comprehensive guide to modern API design principles and architectural decision-making. Learn how to select the right pattern (REST, GraphQL, tRPC), implement robust versioning strategies, handle pagination, define standardized response formats, and incorporate essential security measures like authentication and rate limiting. Essential for building scalable and reliable backend services.

A comprehensive guide for developers on building secure and robust APIs across REST, GraphQL, and WebSocket protocols. It covers essential security patterns including robust authentication (JWT, OAuth 2.0), granular authorization (RBAC), input validation to prevent injection attacks (SQLi, XSS), rate limiting, and best practices for data encryption and secure headers. Essential for developers preparing for security audits.

A specialized workflow guide for comprehensive security testing of REST and GraphQL APIs. It systematically covers critical security aspects such as authentication validation (OAuth2, JWT), authorization checks (IDOR, privilege escalation), input validation (SQL/NoSQL injection), rate limiting enforcement, and secure error handling. Ideal for vulnerability assessment, bug bounty programs, and pre-deployment security audits.

Configures a robust CI/CD pipeline for Apollo.io integrations using GitHub Actions. It implements multi-stage testing, including unit tests (using MSW mocks for zero API calls), live integration tests (gated to main branch), and secret scanning. Ensures reliable and safe deployment practices for SaaS applications.

A comprehensive guide for deploying Apollo.io integrations to production environments. This skill covers robust deployment strategies across multiple cloud platforms, including Vercel, GCP Cloud Run, and Kubernetes. It emphasizes best practices such as implementing health check endpoints, managing secrets using dedicated secret managers, and structuring CI/CD pipelines for reliable, scalable, and secure production rollouts.

Implements enterprise-grade Role-Based Access Control (RBAC) for Apollo.io API integrations. This skill is essential for managing team permissions, ensuring data segregation, and implementing robust security controls by proxying API calls. It defines granular roles (Viewer, Analyst, Admin) and maps specific API operations to required permissions, preventing all-or-nothing key usage.

Provides a comprehensive guide on authenticating and setting up the Apollo.io API client. This guide covers installation steps for both Node.js (axios) and Python (requests), demonstrating best practices for handling API keys securely using environment variables and verifying the connection status using the /auth/health endpoint.

This comprehensive tool provides an automated, multi-stage checklist for deploying Apollo.io integrations to a production environment. It validates crucial aspects including secure authentication (API keys, headers), system resilience (rate limiting, retry logic), observability (PII redaction, structured logging), and financial controls (credit tracking). Use this checklist before going live or when performing production system audits to ensure full compliance and stability.

A comprehensive guide covering security best practices for integrating with the Apollo.io API. This includes secure key storage (using secret managers/env vars), implementing PII redaction for logging, adhering to the principle of least privilege (using standard vs. master keys), and performing key rotation procedures. Essential for building secure and compliant integrations.