Skill UI

Security-first development practices for web applications. Covers threat modeling with STRIDE, OWASP Top Ten defenses, input validation, parameterized queries, authentication and session hardening, security headers, dependency auditing, and supply-chain risk assessment.

A comprehensive security auditing framework designed to systematically detect sensitive information disclosure from Large Language Models (LLMs). It uses multi-phase, escalating dialogue probes to test for leaks such as system prompts, API keys, PII, and internal configurations. Essential for red teaming and rigorous model security assessment.

A comprehensive guide detailing security best practices for the Hex data analytics platform. This covers secure API key management (read vs. run scopes), implementing least privilege access, validating webhooks, and redacting sensitive data from logs. Use this guide when auditing Hex security configuration or integrating secure data pipelines.

This comprehensive checklist guides users through critical operational readiness steps for a ClickHouse production deployment. It covers server tuning (config.xml), schema design best practices, robust backup strategies (S3), detailed monitoring setup (Prometheus/Grafana), security hardening, and application integration verification. Use this document before go-live, during major upgrades, or when auditing production systems to ensure maximum stability and performance.

A comprehensive guide to securing ClickUp API usage. Learn best practices for managing API tokens, implementing least-privilege access, and auditing usage patterns. This includes secure token rotation procedures, using environment variables, setting up pre-commit hooks to prevent leaks, and structuring calls for robust audit logging.

This comprehensive guide outlines essential security protocols for integrating with the Figma API. It covers best practices including securely storing Personal Access Tokens (PATs), implementing least-privilege scopes, managing token rotation lifecycles, and verifying incoming webhook payloads. Use this when setting up, auditing, or maintaining production-grade Figma integrations to ensure data integrity and prevent unauthorized access.

This guide provides comprehensive security best practices for developers building with Framer. It covers secure credential management (like API keys and Site IDs), implementing the principle of least privilege, and securing plugins and Server API connections. Use this when auditing your Framer setup or ensuring production-level security for sensitive data handling.

A comprehensive checklist for validating the operational readiness of any Navan API integration before deployment to a live production environment. This guide covers critical areas including credential security (rotation, secret management), robust error handling, rate limit strategies, Single Sign-On (SSO) setup, data synchronization, and compliance auditing (PCI DSS, GDPR). Use this when ensuring mission-critical API stability.

This comprehensive skill provides a structured, actionable checklist for verifying and auditing Notion API integrations before they go live in a production environment. It covers critical areas such as environment variable security, least-privilege capability scoping, robust rate limit handling, data pagination, and comprehensive error management. Use this checklist during go-live preparation, system audits, or major feature deployments to ensure the integration is secure, stable, and fully functional.

A comprehensive checklist designed to validate that an Oracle Cloud Infrastructure (OCI) environment meets rigorous production-grade standards. This tool automates checks for critical security controls, including compartment isolation, backup policy enforcement, NSG/security list auditing, API key rotation status, encryption verification, and compliance monitoring via Cloud Guard. Use it when preparing an OCI environment for mission-critical workloads or conducting a formal security audit.

This guide outlines comprehensive security best practices for integrating with Palantir Foundry. It covers secure credential storage (using secrets managers like AWS Secrets Manager or Vault), implementing the Principle of Least Privilege via OAuth2 scopes, and establishing robust credential rotation procedures. Use this when securing production environments, setting up new data pipelines, or auditing existing API access controls.

A comprehensive checklist for deploying Shopify apps to production or submitting to the App Store. It covers critical areas including API versioning, mandatory GDPR compliance webhooks, webhook security best practices, rate limit resilience, and App Store listing requirements. Use this guide when preparing for a major launch or auditing existing compliance gaps to ensure maximum stability and security.