Skill UI

LaZagne is an open-source post-exploitation tool utilized by red teams to harvest stored credentials from compromised endpoints. It supports Windows, Linux, and macOS, extracting passwords from browsers (Chrome, Edge), databases (MySQL, SQLite), system vaults (DPAPI, LSA), and various applications. It is crucial for privilege escalation and lateral movement during authorized security assessments.

This skill guide provides a comprehensive framework for automating the secure rotation of service account credentials. It addresses the challenge of managing long-lived secrets across diverse environments, including Active Directory, AWS, GCP, Azure, and databases. By implementing centralized secrets management (like HashiCorp Vault) and automated workflows, users can systematically eliminate stale credentials, dramatically reducing the risk of security breaches and non-compliance.

Manages production-grade secret infrastructure, covering Vault clusters, cloud secret stores, auth methods, rotation, and audit patterns to harden DevOps pipelines and respond to leaks.

Creates and edits Obsidian Flavored Markdown, covering frontmatter, wikilinks, embeds, callouts, math, diagrams, and other vault-specific syntax so notes render correctly when working in Obsidian or referencing its features.

A comprehensive guide detailing how to securely configure and manage Canva Connect API integrations across development, staging, and production environments. This resource covers environment strategy, best practices for OAuth credential management, secret handling (AWS, GCP, Vault), and implementing environment isolation guards to ensure secure and scalable deployments.

This guide outlines best practices for configuring and securing Adobe API access across Development, Staging, and Production environments. It details the use of separate Developer Console projects, implementing least-privilege OAuth scopes, and integrating robust secret management solutions (GCP Secret Manager, AWS Secrets Manager, HashiCorp Vault) into CI/CD pipelines for secure, scalable deployments.

A comprehensive guide to securing Web3 applications utilizing Alchemy. It covers critical best practices, including implementing secure API key proxies, managing private keys via secret vaults, validating blockchain inputs (addresses, block numbers), and verifying webhook signatures to harden your dApp infrastructure.

A comprehensive guide and code pattern for configuring ClickHouse instances across development, staging, and production environments. It emphasizes best practices for infrastructure-as-code (IaC), secure secrets management (integrating AWS Secrets Manager, Vault, etc.), and ensuring environment-specific settings are correctly applied for reliable data analytics pipelines.

This guide provides a comprehensive strategy for configuring ClickUp API access across development, staging, and production environments. It emphasizes the critical importance of environment isolation using separate API tokens and dedicated workspaces to prevent data leaks and accidental destructive operations in live environments. Includes best practices for secret management (Vault, AWS, GCP) and implementing environment guards.

A comprehensive guide for configuring and integrating the Cohere API v2 across development, staging, and production environments. This pattern ensures environment-specific settings—including API keys, model selections, token limits, and caching strategies—are correctly applied. It covers best practices for secure secret management using tools like Vault, AWS Secrets Manager, and GCP Secret Manager, ensuring robust and scalable deployments.

This guide details best practices for setting up and managing HubSpot integrations across development, staging, and production environments. It emphasizes the critical use of environment-specific access tokens, robust secret management (Vault, AWS/GCP SM), and implementing safety guards within CI/CD pipelines to ensure data integrity and prevent cross-environment deployment errors.

This guide provides a comprehensive strategy for configuring Klaviyo across development, staging, and production environments. It covers best practices for using separate API keys, implementing robust environment detection logic (like reading NODE_ENV), and utilizing secret management solutions (AWS/GCP/Vault). Crucially, it teaches how to implement 'guards' to prevent accidental real-world actions, such as sending live emails or deleting data, in non-production environments, ensuring data integrity and smooth CI/CD deployment.