Skill UI

Implement robust data governance and security measures within Palantir Foundry. This skill guides users through PII redaction, applying data markings (e.g., CONFIDENTIAL, RESTRICTED), ensuring GDPR/CCPA compliance, and establishing automated data retention policies. It provides methods for column-level security and auditable deletion workflows for sensitive information.

This guide outlines comprehensive security best practices for integrating with Palantir Foundry. It covers secure credential storage (using secrets managers like AWS Secrets Manager or Vault), implementing the Principle of Least Privilege via OAuth2 scopes, and establishing robust credential rotation procedures. Use this when securing production environments, setting up new data pipelines, or auditing existing API access controls.

This guide details best practices for securing Persona identity verification implementations. It covers critical security measures such as API key rotation, webhook HMAC verification, encrypting Personally Identifiable Information (PII) at rest, and maintaining comprehensive audit logs. Use this when integrating Persona into a production system requiring high data security and compliance.

A comprehensive guide detailing best practices for securing Salesforce integrations and API access. It covers configuring Connected Apps with minimum OAuth scopes, implementing least privilege access, establishing dedicated integration users, and enforcing Field-Level Security (FLS). Essential knowledge for robust API development, security audits, and maintaining data integrity within the Salesforce ecosystem.

A comprehensive checklist for deploying Shopify apps to production or submitting to the App Store. It covers critical areas including API versioning, mandatory GDPR compliance webhooks, webhook security best practices, rate limit resilience, and App Store listing requirements. Use this guide when preparing for a major launch or auditing existing compliance gaps to ensure maximum stability and security.

This skill provides comprehensive guidance on implementing security best practices for Shopify applications. It covers critical topics such as secure API credential storage, verifying incoming webhooks using HMAC signatures, enforcing least-privilege access scopes, and setting Content Security Policies (CSP). Use this guide when building, auditing, or scaling a secure e-commerce integration.

This guide details essential security best practices for Snowflake data warehouses. It covers implementing network policies, managing key rotation, enabling Multi-Factor Authentication (MFA), and securing credentials using secret managers. Use this comprehensive resource to audit security configurations, restrict network access, and enforce least-privilege access within your Snowflake environment.

This skill provides a comprehensive framework for security auditing LLM agents that possess external tools (file system access, command execution, network calls). It employs advanced dialogue probing techniques—such as command injection, path traversal, and SSRF attempts—to identify vulnerabilities where the agent might be induced to execute unexpected or malicious code, or access sensitive resources. Essential for red teaming and securing agent functionalities.

This guide details comprehensive security best practices for Webflow Data API v2. It covers crucial topics such as selecting the correct token type, implementing least privilege access scopes, secure secret rotation, and verifying webhook signatures. Use this knowledge when building or auditing Webflow integrations to ensure robust data security and system reliability.

This skill enforces output quality and evidence verification across security audits like SAST, SCA, and code reviews. It prevents suppression of valid findings and ensures reports meet quality thresholds before delivery. Includes components for self-critique, anti-rationalization, and continuous learning to maintain intellectual honesty and accuracy in security analysis workflows.

This skill performs a proactive, comprehensive audit to quantify the business and regulatory impact of a potential data breach before it occurs. It inventories sensitive data (PII, PHI, PCI-DSS), traces complex data flows through the codebase, identifies all exposure vectors, and calculates the 'blast radius.' The output provides law-sourced figures (e.g., GDPR, CCPA, HIPAA fine maximums) alongside heuristic risk estimates, guiding proactive hardening roadmaps for compliance and security.

Logic Lens is an advanced AI skill that performs deep, formal logic-driven code review. Unlike standard linters, it analyzes code for complex issues like race conditions, security vulnerabilities (SQL injection, XSS), type safety flaws, and algorithmic errors across 9 critical risk categories. It is ideal for pre-merge PR reviews, auditing sensitive code paths, and refactoring complex business logic.