Skill UI

Assists with security fundamentals by auto-activating when asked about https certificate checker tasks, guiding through detection patterns, secure coding, and validation workflows for reliable certificate handling.

Automates input validation checker guidance within the Security Fundamentals category, offering best practices, secure coding patterns, production-ready snippets, and output validation for common standards.

Automates guidance and code for identifying insecure deserialization flaws, following Security Fundamentals best practices to help with authentication, input validation, and secure coding checks when that phrase is mentioned.

Automated license compliance scanner guidance for Security Fundamentals, delivering step-by-step practices, best-practice patterns, and production-ready code plus validation to keep authentication, validation, and secure coding efforts aligned.

This expert specializes in secure mobile development practices, covering areas like input validation, WebView security, secure data storage (KeyStore/Keychain), and advanced network security (Certificate Pinning). Use this skill to write secure, resilient mobile code for both iOS and Android, mitigating platform-specific vulnerabilities and ensuring sensitive data protection.

Guides developers through OAuth2 Flow Helper tasks within Security Fundamentals by providing best-practice instructions, generating production-ready code/configs, and validating outputs for authentication, validation, and secure coding.

A comprehensive guide to managing and reducing costs associated with Obsidian's paid services (Sync, Publish) and external API calls from community plugins. Learn how to audit vault size, implement secure exclusion patterns for sync, and utilize coding techniques like caching and rate limiting to control usage fees from external services (e.g., AI).

This guide provides essential security protocols and coding best practices for integrating with OpenEvidence, a platform processing Protected Health Information (PHI). It covers mandatory topics such as HIPAA compliance, API key management, webhook signature verification, input validation, and data redaction, ensuring all interactions are secure and audit-compliant.

Guides users through password hash generator tasks within the Security Fundamentals stack, outlining best practices, secure coding patterns, and validation checks tailored for authentication workflows.

Secret Scanner Assistant auto-activates within Security Fundamentals to guide you on secret detection, authentication, validation, secure coding, and vulnerability checks with best practices.

A comprehensive guide to implementing secure secrets management practices for Continuous Integration/Continuous Deployment (CI/CD) pipelines. It covers using industry-leading tools like HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, and GCP Secret Manager to securely store, retrieve, and automatically rotate credentials (API keys, database passwords, TLS certificates) without hardcoding them into source code. Includes best practices for least-privilege access and audit logging.

Automates the creation and validation of security headers by guiding users through authentication, input validation, secure coding, and vulnerability detection practices within the Security Fundamentals domain.