Skill UI

This skill guide provides a comprehensive framework for automating the secure rotation of service account credentials. It addresses the challenge of managing long-lived secrets across diverse environments, including Active Directory, AWS, GCP, Azure, and databases. By implementing centralized secrets management (like HashiCorp Vault) and automated workflows, users can systematically eliminate stale credentials, dramatically reducing the risk of security breaches and non-compliance.

This skill provides comprehensive security hardening guidelines for serverless compute platforms like AWS Lambda, Azure Functions, and Google Cloud Functions. It covers essential security pillars including enforcing least privilege IAM roles, integrating robust secrets management (e.g., AWS Secrets Manager), automating dependency vulnerability scanning within CI/CD pipelines, and implementing strict input validation to mitigate risks such as injection and credential theft. Ideal for DevSecOps practitioners and security architects.

This skill guides users through advanced security auditing and best practices for Golang development. It acts as a senior security engineer, focusing on defense in depth by analyzing critical areas like injection patterns, cryptography, secrets management, and authorization flaws. It supports full codebase audits (using STRIDE and DREAD scoring) and precise PR vulnerability reviews, ensuring secure and resilient Go applications.

This guide provides essential security controls for integrating with the Attio REST API. It details best practices for managing API tokens, including applying least-privilege scopes, implementing secure secret management across various platforms (AWS, Vercel, etc.), executing proper token rotation, and validating webhook signatures to prevent common security vulnerabilities.

A comprehensive guide detailing how to securely configure and manage Canva Connect API integrations across development, staging, and production environments. This resource covers environment strategy, best practices for OAuth credential management, secret handling (AWS, GCP, Vault), and implementing environment isolation guards to ensure secure and scalable deployments.

This guide details securing the CAST AI integration across multiple layers. It covers best practices for API key management (including rotation and secrets storage), implementing least-privilege RBAC using 'kubectl', deploying the Kvisor security agent for runtime scanning, and setting up Kubernetes Network Policies to restrict egress traffic. Use this when hardening production clusters or performing security audits.

A comprehensive guide on deploying applications connected to ClickHouse Cloud across various modern cloud environments, including Vercel, Fly.io, and Google Cloud Run. This guide covers best practices for connection pooling, secure secret management, implementing health checks, and ensuring graceful shutdowns in serverless and containerized setups.

Provides comprehensive guides and code examples for deploying ClickUp-powered applications to various cloud environments like Vercel, Fly.io, and Google Cloud Run. It covers secure secret management, API token handling, setting up health checks, and processing webhooks, ensuring robust and scalable SaaS integrations.

This skill provides comprehensive instructions and code examples for deploying Figma-powered applications, such as webhook receivers and design token APIs, to various production platforms including Vercel, Google Cloud Run, and Fly.io. It covers best practices for secret management, setting up robust webhooks, and implementing health checks to ensure reliable operation in a production environment.

A comprehensive checklist designed to validate the deployment, robustness, and security of an enterprise search system powered by Glean. It covers critical areas such as API integration, secrets management, error handling, monitoring, and permissions, ensuring a stable and reliable user experience in a production setting.

This guide provides essential security fundamentals for integrating with the Grammarly API. It covers secure credential management (client secrets, access tokens), OAuth token handling, webhook signature verification, and data redaction techniques to protect sensitive user content and maintain compliance.

This comprehensive guide details how to set up robust Continuous Integration/Continuous Deployment (CI/CD) pipelines for HubSpot integrations using GitHub Actions. It covers unit tests, deep integration tests against a developer test account, and secure secret management. Ideal for automating HubSpot API testing, ensuring consistent code quality across branches, and implementing reliable deployment workflows for CRM features.