Skill UI

This comprehensive guide details how to implement robust webhook endpoints for CodeRabbit, an AI-powered code review tool. It covers essential security practices, including signature validation (HMAC-SHA256), and provides structured methods for handling various event types (e.g., PR reviews, check run completions, comments). Use this skill when integrating CodeRabbit into CI/CD pipelines to automate notifications, track metrics, and enforce quality gates.

Implements a robust caching strategy by using the SHA-256 hash of file content as the primary key, instead of the file path. This pattern is essential for high-cost file processing pipelines (like OCR, PDF parsing) because it ensures cache hits survive file renaming or moving, while still automatically invalidating entries when the content changes. It adheres to the Single Responsibility Principle (SRP) by isolating caching logic into a service layer wrapper.

This comprehensive guide details essential security best practices for integrating with Customer.io. It covers secure credential storage using secrets managers, sanitizing Personally Identifiable Information (PII) via hashing, verifying webhook signatures (HMAC-SHA256) to ensure data integrity, and establishing procedures for API key rotation to maintain compliance with GDPR/CCPA regulations.

This guide outlines essential security best practices for integrating Firecrawl. It covers secure API key storage (using environment variables and .gitignore), verifying webhook signatures with HMAC-SHA256 for data integrity, implementing key rotation strategies across different environments (dev/staging/prod), and sanitizing scraped content to mitigate XSS and PII risks. Essential for building secure, production-grade systems.

Master the implementation of Firecrawl webhooks for robust, real-time handling of asynchronous crawling and batch scraping jobs. Instead of inefficiently polling the crawl status, configure webhook endpoints to receive instant POST events (e.g., `crawl.page`, `crawl.completed`). This guide covers event types, signature verification using HMAC-SHA256, and processing streamed data for building advanced data pipelines.

This guide outlines essential security protocols for integrating Fireflies.ai. It covers best practices for managing sensitive API keys (e.g., environment variables, pre-commit hooks), implementing robust HMAC-SHA256 webhook signature verification in multiple languages (TypeScript, Python), and correctly configuring transcript privacy levels to ensure data confidentiality. Ideal for developers setting up production-ready integrations.

This script provides a complete solution for setting up a webhook receiver for Fireflies.ai. It includes crucial HMAC-SHA256 signature verification to ensure data integrity, and then uses the Fireflies API to fetch the full transcript details, summary, and action items. Ideal for building real-time meeting intelligence pipelines, integrating meeting data into CRMs, or automating task creation.

This guide details secure methods for connecting external applications to the Linear API. It covers essential security practices, including secure storage of API keys using environment variables, implementing OAuth 2.0 with PKCE for robust authentication, managing token refresh cycles, and verifying webhook signatures using HMAC-SHA256. Essential for building production-grade, secure integrations.

A comprehensive toolkit for integrating with the official WhatsApp Business Cloud API (Meta). Supports message sending, template management, webhooks (HMAC-SHA256), and advanced customer service automation. Provides ready-to-use boilerplates in Node.js and Python, facilitating scalable and professional communication solutions.

This script is designed for malware analysis, specifically targeting .NET-based Remote Access Trojans (RATs) like Agent Tesla. It automatically extracts embedded and obfuscated configuration data, including SMTP credentials, FTP endpoints, Telegram tokens, and C2 webhooks. It utilizes advanced techniques such as regex pattern matching, Base64 decoding, and simulating XOR/SHA256 decryption to reveal critical threat intelligence for security research.

This skill provides a comprehensive workflow to extract Indicators of Compromise (IOCs) from malware samples and analysis reports. It covers file hashes (SHA256, MD5), network artifacts (IPs, domains, URLs from strings and PCAPs), and host-based indicators (registry keys, file paths, mutexes) from sandbox reports. It is essential for threat intelligence sharing, building blocklists, and creating detection signatures (YARA, Snort).

This utility implements an append-only log integrity chain using SHA-256 hash chaining. It ensures tamper detection by linking each log entry to the previous one, forming a blockchain-like structure. Functions include log ingestion, chain verification, pinpoint tamper detection, and anchoring to external timestamping services for robust audit logging and compliance.