Skill UI

This guide outlines comprehensive security best practices for integrating with Palantir Foundry. It covers secure credential storage (using secrets managers like AWS Secrets Manager or Vault), implementing the Principle of Least Privilege via OAuth2 scopes, and establishing robust credential rotation procedures. Use this when securing production environments, setting up new data pipelines, or auditing existing API access controls.

This comprehensive guide assists in deploying the Persona identity verification service to various cloud platforms. It covers essential development practices, including Dockerfile generation, secrets management, and implementing robust health checks. Use this skill when integrating KYC or identity verification processes into a cloud-native application.

This guide details how to establish secure API access to the Procore construction management platform. It utilizes the OAuth2 client credentials flow, allowing developers to obtain necessary access tokens using client IDs and secrets. This setup is crucial for integrating custom applications to manage projects, retrieve RFIs, or handle submittals programmatically.

This skill guides the setup of Continuous Integration and Continuous Deployment (CI/CD) pipelines for Salesforce projects using GitHub Actions. It covers automated metadata deployment, rigorous Apex unit testing, and integration testing, ensuring code quality and stability before every release. Key steps include configuring JWT authentication, setting up GitHub Secrets, and defining multi-stage workflows to validate and deploy changes across environments.

This guide provides a comprehensive workflow for configuring and managing Salesforce integrations across multiple environments, including Development, various Sandboxes (QA, Staging), and Production. It covers best practices for environment-specific credential handling, utilizing secrets managers (Vault, AWS/GCP), and establishing robust CI/CD deployment promotion flows using Salesforce CLI and code examples.

This guide provides comprehensive steps for deploying Shopify applications (including extensions and functions) to various production cloud hosting platforms, such as Vercel, Fly.io, and Google Cloud Run. It covers critical aspects like environment configuration, setting up necessary webhooks, utilizing the Shopify CLI for deployment, and best practices for securely handling platform-specific secrets and ensuring production stability. Use this when moving a local Shopify app to a live e-commerce environment.

Implement comprehensive automated policy enforcement for Shopify apps, ensuring security and adherence to App Store guidelines. This skill includes ESLint rules for detecting hardcoded API secrets, enforcing GraphQL query cost budgets, and running pre-commit hooks and CI checks for critical compliance validations (e.g., GDPR webhooks). Use it when hardening a production-ready Shopify application.

Master the deployment of applications connected to Snowflake across various cloud environments, including serverless functions (AWS Lambda, Cloud Run) and containers. This guide covers best practices for secure connection management, connection pooling, handling secrets (like private keys), and ensuring application reliability in production settings.

Configure secure and isolated Webflow integrations across development, staging, and production environments. This guide details how to manage separate API tokens, Site IDs, and secure secrets using industry-standard secret managers like HashiCorp Vault, AWS Secrets Manager, and GCP Secret Manager, ensuring data integrity and reliable deployment in a CI/CD pipeline.

This skill performs comprehensive, feature-level integration validation after all associated development tasks are implemented. It goes beyond checking individual tasks to ensure cross-task consistency, full test suite passage, and complete specification coverage. It validates data flow, architectural adherence, and performs critical security scans for residual issues (e.g., TODOs, hardcoded secrets), providing a holistic GO/NO-GO assessment for deployment. Use this skill as a final quality gate to verify that the completed feature set respects the designed boundaries and dependencies end-...

A comprehensive playbook detailing advanced techniques for attacking Kubernetes clusters. Covers API server access, RBAC privilege escalation, service account token abuse, etcd secrets extraction, Kubelet exploitation, and various container escapes. This guide is essential for security professionals and red teams performing deep security assessments on cloud-native infrastructure.

Master the design, debugging, and hardening of production-grade GitHub Actions CI/CD pipelines. This skill covers advanced topics including reusable workflows, matrix builds, self-hosted runners, OIDC authentication, secrets management, environment protection, and complex trigger patterns (e.g., workflow_call, schedule, release). Use this to automate complex build, test, and deployment processes.