Skill UI

This guide details how to establish secure API access to the Procore construction management platform. It utilizes the OAuth2 client credentials flow, allowing developers to obtain necessary access tokens using client IDs and secrets. This setup is crucial for integrating custom applications to manage projects, retrieve RFIs, or handle submittals programmatically.

This guide provides comprehensive instructions for deploying SalesLoft-powered applications to major cloud platforms like Vercel, Fly.io, and Google Cloud Run. It covers essential production setup tasks, including secure secret management, configuring HTTPS webhook endpoints, and implementing robust health checks to ensure reliable operation in a live environment.

This guide provides a comprehensive setup for Continuous Integration/Continuous Deployment (CI/CD) pipelines for Shopify apps. It utilizes GitHub Actions to automate linting, unit testing, and critical integration tests. Key features include API version compatibility checking, secure secret management, and streamlined deployment via the Shopify CLI, ensuring stable and reliable e-commerce functionality. Ideal for setting up automated release cycles or monitoring API changes.

Master the deployment of applications connected to Snowflake across various cloud environments, including serverless functions (AWS Lambda, Cloud Run) and containers. This guide covers best practices for secure connection management, connection pooling, handling secrets (like private keys), and ensuring application reliability in production settings.

Seamlessly deploy Webflow-powered applications and APIs to leading cloud platforms like Vercel, Fly.io, and Google Cloud Run. This integration manages secure secret management, configures robust webhooks for event handling (e.g., form submissions, new orders), and includes comprehensive health checks, ensuring reliable, scalable, and continuous deployment for Webflow-based services.

A comprehensive guide detailing best practices for securing Quarkus applications. It covers robust authentication methods like JWT and OIDC, role-based access control (RBAC) for authorization, mandatory input validation using Bean Validation, preventing SQL injection, and secure secret management. Essential for developers building highly secure Java microservices.

Master the design, debugging, and hardening of production-grade GitHub Actions CI/CD pipelines. This skill covers advanced topics including reusable workflows, matrix builds, self-hosted runners, OIDC authentication, secrets management, environment protection, and complex trigger patterns (e.g., workflow_call, schedule, release). Use this to automate complex build, test, and deployment processes.

This skill guides the implementation of dynamic secrets using HashiCorp Vault. It focuses on generating short-lived, ephemeral credentials for services like databases (PostgreSQL, MySQL), AWS IAM, and PKI certificates. By automating credential generation, lease management, and rotation, it eliminates the risk associated with storing long-lived static secrets, ensuring compliance with zero-trust security models (PCI-DSS, NIST).

This skill serves as the central configuration manager for AI agent projects, defining the single source-of-truth for all capabilities (skills, tools, servers, rules, plugins). It guides users through the entire system lifecycle using the `capa` CLI, covering installation, schema definition, secret management, and advanced troubleshooting. Use this skill whenever setting up, modifying, or troubleshooting project capabilities.

An expert advisory tool for the New Zealand Information Security Manual (NZISM). Provides comprehensive guidance for NZ government agencies, contractors, and supply chains on mandatory security compliance. Use cases include gap analysis, system classification (Unclassified to Top Secret), security risk management, and achieving GCSB/NCSC NZ accreditation.

Master secure authentication and authorization implementation using industry-standard patterns. Covers user login systems, REST/GraphQL API security, OAuth2, SSO, session management, and RBAC design. Includes guidance on token lifecycle, secrets storage, and threat modeling to protect resource access boundaries effectively.

Automate the rotation of sensitive credentials, including RDS database passwords, API keys, and OAuth tokens, using AWS Secrets Manager and Lambda. This skill ensures secure credential lifecycle management, helping maintain system security and compliance by automatically updating credentials for various AWS and third-party services.