Skill UI

This framework implements the OWASP Top 10 standards, specifically tailored for Agentic Applications. It provides a standardized methodology to classify and map diverse security findings—such as prompt injection, tool misuse, and privilege abuse—to ten core risk categories (ASI01-ASI10). It is essential for security teams to systematically assess, prioritize, and remediate vulnerabilities inherent in complex AI agent systems.

This guide provides a comprehensive reference architecture for building production-ready, enterprise-grade applications on Palantir Foundry. It covers the entire data lifecycle, detailing best practices for the standard data pipeline (Raw > Clean > Model), Ontology design, external API integration patterns, and robust multi-layered security models. Use it when designing, planning, or optimizing complex data infrastructure within Foundry.

This guide details best practices for securing Persona identity verification implementations. It covers critical security measures such as API key rotation, webhook HMAC verification, encrypting Personally Identifiable Information (PII) at rest, and maintaining comprehensive audit logs. Use this when integrating Persona into a production system requiring high data security and compliance.

This guide provides implementation patterns for secure integration with the Podium API using REST API calls. It focuses on establishing robust connections with OAuth2 authentication for managing core business functions, including messaging, retrieving customer reviews, and processing payments. It also details essential error handling strategies.

Provides foundational knowledge and implementation patterns for connecting to the Procore API. This skill details how to securely implement OAuth2 authentication (using the Client Credentials flow) to manage data in critical construction processes, including project tracking, RFIs, and document submittals.

This guide provides implementation patterns for establishing security basics when working with QuickNode. It details how to utilize blockchain RPC endpoints and the QuickNode SDK for robust Web3 infrastructure integration. Learn best practices for secure connection, understanding error handling (like 401 Unauthorized or rate limiting), and building reliable applications on the Ethereum network.

This skill provides implementation patterns for interacting with the Ramp Developer API, focusing on security basics, OAuth2 authentication, and managing corporate card and expense data. It guides developers through obtaining access tokens, querying card information, and handling common API errors, making it essential for integrating financial sync or expense tracking into custom applications.

This skill provides secure API integration patterns and implementation details for RemoFirst, a platform managing global HR, EOR, and payroll services. Use this when automating complex global employment workflows, retrieving employee data, or ensuring multi-jurisdictional payroll compliance.

This skill provides implementation patterns for utilizing Runway's AI video generation and creative platform. It covers setting up the SDK, generating videos from images, and handling common API errors (like insufficient credits or unauthorized access). It is designed for developers needing to integrate secure, high-quality AI video workflows into their applications.

This comprehensive guide details the configuration of Salesforce's multi-layered security model, including Profiles, Permission Sets, Roles, Organization-Wide Defaults (OWD), and Sharing Rules. It is essential for implementing robust Role-Based Access Control (RBAC) and integrating advanced features like SAML SSO, ensuring users only access necessary data.

This guide implements comprehensive policy guardrails for robust Salesforce integrations. It provides solutions for preventing SOQL injection vulnerabilities, detecting hardcoded credentials, throttling API usage at runtime, and enforcing code quality via custom ESLint rules and CI/CD checks. Use this when building secure, scalable, and compliant Salesforce applications.

A comprehensive guide detailing best practices for securing Salesforce integrations and API access. It covers configuring Connected Apps with minimum OAuth scopes, implementing least privilege access, establishing dedicated integration users, and enforcing Field-Level Security (FLS). Essential knowledge for robust API development, security audits, and maintaining data integrity within the Salesforce ecosystem.