Skill UI

This skill provides a structured methodology for reviewing code commits intended to fix security vulnerabilities or address audit findings. It ensures that the original root cause is properly resolved, verifies the fix hasn't introduced new bugs or vulnerabilities (regressions), and validates the overall completeness of the remediation effort. Ideal for security-critical code reviews.

This skill provides a robust framework for implementing Role-Based Access Control (RBAC) when integrating with Gamma API in enterprise or multi-tenant environments. Since Gamma's API key is workspace-level, this solution enforces granular, per-user permissions (Guest, Viewer, Editor, Admin) at the application layer. Key components include authorization middleware, multi-tenant isolation logic, usage quota management, and detailed audit logging, ensuring system security and compliance in large-scale deployments.

Generates complete, production-ready Google Cloud Platform (GCP) code examples and infrastructure templates. It spans various modern AI patterns, including ADK agents, Genkit RAG flows, and multimodal analysis using Vertex AI and Gemini. The output includes runnable code, deployment configuration (Terraform/IaC), security best practices (IAM, VPC-SC), and monitoring setup, ensuring enterprise-grade reliability and cost optimization.

Automates compliance and security audit reporting for standards such as PCI DSS, HIPAA, SOC 2, and ISO 27001 by using the compliance-report-generator plugin to collect details, format documentation, and streamline regulatory proof.

Validates Vertex AI Agent Engine GitHub Actions workflows, enforcing Workload Identity Federation, least-privilege IAM, OIDC permissions, and security scanning so GCP deployments stay automated and secure.

A comprehensive guide featuring best practices and patterns for building robust GitLab CI/CD pipelines. Covers multi-stage deployments, containerization (Docker), infrastructure as code (Terraform), security scanning, caching strategies, and advanced GitOps workflows for automated testing and deployment to Kubernetes.

Configure robust role-based access control (RBAC) for Granola workspaces, essential for enterprise-level data security and governance. This guide details setting up role hierarchies (Owner, Admin, Member, Viewer), defining granular permissions, integrating SSO/SCIM for automated provisioning, and implementing least-privilege access principles. It also covers advanced features like per-workspace sharing policies and detailed audit logging to ensure regulatory compliance.

This guide details the comprehensive setup of Granola for large-scale, multi-departmental enterprise environments. It covers creating isolated workspaces (e.g., Engineering, HR, Sales), integrating Identity Providers using SSO/SCIM, and implementing granular compliance controls (data retention, external sharing, MFA) to ensure data security and departmental autonomy.

A comprehensive reference architecture for deploying meeting intelligence platforms (like Granola) across large organizations. This blueprint details the core data capture pipeline, integration topology using middleware (Zapier), multi-workspace structure (Sales, HR, Engineering), and robust security layers (SSO, AES-256) to ensure automated workflows from meeting to action item across all departments.

This comprehensive guide outlines best practices for securing Granola meeting data. It covers critical compliance standards, including SOC 2 and GDPR, and details technical controls such as AES-256 encryption, TLS 1.3 transmission, and robust configuration of SSO and data retention policies for enterprise use.

A comprehensive guide detailing best practices for securing Groq API keys and managing data privacy. It covers critical steps such as using environment variables, implementing secure key rotation procedures, preventing key leaks via pre-commit hooks, and defending against prompt injection attacks for robust application development.

This guide outlines critical security measures for integrating with Guidewire systems, which handle sensitive policyholder PII, claims, and financial data. It covers best practices for implementing OAuth2 JWT authentication, API role scoping, input validation, and sensitive data redaction (PII) to prevent data breaches and meet compliance standards.