Skill UI

Comprehensive guide for configuring Bring Your Own Key (BYOK) for major AI providers, including OpenAI, Anthropic, Google Gemini, Azure, and custom endpoints. This allows users to bypass default quotas, manage costs directly with the source provider, and utilize a wide range of specialized models within the Cursor IDE. It covers setup steps, security best practices, and cost monitoring strategies.

This framework provides comprehensive compliance and security auditing for Cursor IDE usage. It covers major regulations like SOC 2, GDPR, and HIPAA, guiding users through detailed checklists, evidence collection, and remediation steps. It is essential for enterprise teams requiring robust data governance and adherence to strict industry standards.

A comprehensive guide to avoiding common pitfalls when using AI-powered IDEs like Cursor. It covers best practices for AI interaction, secure coding habits (handling secrets, credentials), project configuration (rules, ignore files), and performance optimization. Essential for maintaining high code quality and security in AI-assisted workflows.

A comprehensive guide for setting up and maintaining Cursor IDE for enterprise and production use. It covers essential best practices including security hardening, defining project-wide coding rules, optimizing codebase indexing, ensuring data privacy compliance, and standardizing team development workflows. Essential for adopting AI coding tools in a professional environment.

A comprehensive reference guide for structuring development projects within the Cursor IDE. It details best practices for directory layout, defining layered rules (covering global conventions, security constraints, and technology-specific patterns like API routes and database access), and optimizing indexing strategies. This ensures maximum AI effectiveness, improves code maintainability, and streamlines the entire development workflow.

This comprehensive guide details essential security best practices for integrating with Customer.io. It covers secure credential storage using secrets managers, sanitizing Personally Identifiable Information (PII) via hashing, verifying webhook signatures (HMAC-SHA256) to ensure data integrity, and establishing procedures for API key rotation to maintain compliance with GDPR/CCPA regulations.

A comprehensive guide for establishing robust, enterprise-grade access control within Databricks. Covers implementing Single Sign-On (SSO) via SCIM, leveraging Unity Catalog for fine-grained Role-Based Access Control (RBAC), defining cluster policies, and enforcing data governance measures like Row-Level Security (RLS) and column masking. Essential for large-scale, secure data platforms.

A comprehensive guide detailing security best practices for Deepgram API integration. It covers critical topics such as implementing scoped API keys, key rotation strategies, enabling built-in PII redaction for sensitive data, generating temporary client-side keys, and validating audio URLs to prevent SSRF attacks. Use this when building robust, production-grade applications requiring high data security and compliance.

This skill functions as a specialized dependency security expert. It analyzes project dependencies to identify critical security vulnerabilities, licensing compliance issues, and outdated packages. It provides comprehensive, actionable remediation strategies to strengthen supply chain security.

Enables Claude to apply anomaly-detection-system workflows for spotting outliers, fraud, or unusual patterns across datasets, selecting tailored algorithms like Isolation Forest and summarizing deviations for any data monitoring or security use case.

Performs security-focused differential review of PRs, commits, and diffs, adapting depth to repo size, tracing git history, estimating blast radius, checking coverage, and producing detailed markdown reports to stop regressions.

Collects Docker build, compose, and runtime tips including multi-stage builds, isolated dependencies, compose healthchecks, .dockerignore, image analysis, and security anti-patterns to streamline container pipelines.