Skill UI

Guides security testers through identifying, exploiting, and remediating insecure direct object references in web apps, with methods covering reconnaissance, request manipulation, Burp Suite automation, and reportable mitigation steps.

A comprehensive guide detailing security best practices for integrating with Instantly.ai. Learn how to implement least-privilege API scopes (e.g., campaigns:read), manage secrets using environment variables or dedicated secret managers, execute secure API key rotations, and validate incoming webhooks using custom headers. This skill is essential for developers building robust, secure, and scalable SaaS integrations.

Specialized skill for designing, building, and optimizing modern, cloud-native enterprise Java applications. Covers microservices architecture, Spring Boot 3.x, reactive programming (WebFlux), advanced data persistence (JPA optimization, R2DBC), and robust security implementation (OAuth2/JWT). Use this when implementing DDD patterns, ensuring high test coverage, and managing complex transaction boundaries.

This guide provides comprehensive security best practices for integrating with the Juicebox API. It covers critical areas such as secure API key management (using secrets managers), robust webhook signature verification, input validation using schemas, and essential data protection techniques like PII redaction. It ensures compliance with global regulations like GDPR and CCPA when handling sensitive professional and contact data.

This comprehensive guide outlines essential security best practices for implementing and using Lindy AI agents. It covers crucial topics such as robust API key management, webhook signature verification, strict agent permission scoping, and secure data handling protocols. Use this resource when auditing agent activity, configuring enterprise security features (SSO/SCIM), or ensuring compliance and minimizing the attack surface area of autonomous AI systems.

This guide details secure methods for connecting external applications to the Linear API. It covers essential security practices, including secure storage of API keys using environment variables, implementing OAuth 2.0 with PKCE for robust authentication, managing token refresh cycles, and verifying webhook signatures using HMAC-SHA256. Essential for building production-grade, secure integrations.

A comprehensive guide detailing security best practices for integrating with Lokalise. Covers strategies for managing API token scopes (read-only vs. read-write), enforcing the principle of least privilege, validating translated content for XSS or credential leakage, verifying webhook secrets, and securing CI/CD pipelines against hardcoded secrets. Essential for developers and DevOps engineers.

This expert specializes in secure mobile development practices, covering areas like input validation, WebView security, secure data storage (KeyStore/Keychain), and advanced network security (Certificate Pinning). Use this skill to write secure, resilient mobile code for both iOS and Android, mitigating platform-specific vulnerabilities and ensuring sensitive data protection.

This guide provides essential security protocols and coding best practices for integrating with OpenEvidence, a platform processing Protected Health Information (PHI). It covers mandatory topics such as HIPAA compliance, API key management, webhook signature verification, input validation, and data redaction, ensuring all interactions are secure and audit-compliant.

This skill provides expert guidance on integrating major payment processors like Stripe and PayPal. It covers end-to-end checkout flows, subscription billing, secure webhook handling, and strict PCI compliance requirements. Use this when building any feature involving financial transactions to ensure reliability and adherence to security best practices.

Comprehensive CLI reference for penetration testing tools spanning network scanning, exploitation, password cracking, and web testing to speed up authorized security assessments.

Guide to mastering essential security scanning tools for network discovery, vulnerability assessment, web application testing, wireless checks, and compliance reporting, covering selection, configuration, and practical workflows.