Skill UI

This guide outlines essential security protocols for integrating Fireflies.ai. It covers best practices for managing sensitive API keys (e.g., environment variables, pre-commit hooks), implementing robust HMAC-SHA256 webhook signature verification in multiple languages (TypeScript, Python), and correctly configuring transcript privacy levels to ensure data confidentiality. Ideal for developers setting up production-ready integrations.

Manages Firebase/Firestore CRUD, queries, batch jobs, and security for applications while extending to A2A agent messaging, MCP server integration, and Cloud Run coordination for advanced workflows.

A comprehensive guide detailing the entire workflow for analyzing embedded firmware. It covers hardware-level extraction methods (UART, JTAG, SPI dump), filesystem analysis (SquashFS, JFFS2), binary reverse engineering using tools like Ghidra, and identifying common vulnerabilities (Buffer Overflow, Command Injection). Ideal for security researchers and embedded systems engineers.

This skill provides a structured methodology for reviewing code commits intended to fix security vulnerabilities or address audit findings. It ensures that the original root cause is properly resolved, verifies the fix hasn't introduced new bugs or vulnerabilities (regressions), and validates the overall completeness of the remediation effort. Ideal for security-critical code reviews.

This skill provides a robust framework for implementing Role-Based Access Control (RBAC) when integrating with Gamma API in enterprise or multi-tenant environments. Since Gamma's API key is workspace-level, this solution enforces granular, per-user permissions (Guest, Viewer, Editor, Admin) at the application layer. Key components include authorization middleware, multi-tenant isolation logic, usage quota management, and detailed audit logging, ensuring system security and compliance in large-scale deployments.

Generates complete, production-ready Google Cloud Platform (GCP) code examples and infrastructure templates. It spans various modern AI patterns, including ADK agents, Genkit RAG flows, and multimodal analysis using Vertex AI and Gemini. The output includes runnable code, deployment configuration (Terraform/IaC), security best practices (IAM, VPC-SC), and monitoring setup, ensuring enterprise-grade reliability and cost optimization.

Automates compliance and security audit reporting for standards such as PCI DSS, HIPAA, SOC 2, and ISO 27001 by using the compliance-report-generator plugin to collect details, format documentation, and streamline regulatory proof.

Validates Vertex AI Agent Engine GitHub Actions workflows, enforcing Workload Identity Federation, least-privilege IAM, OIDC permissions, and security scanning so GCP deployments stay automated and secure.

A comprehensive guide featuring best practices and patterns for building robust GitLab CI/CD pipelines. Covers multi-stage deployments, containerization (Docker), infrastructure as code (Terraform), security scanning, caching strategies, and advanced GitOps workflows for automated testing and deployment to Kubernetes.

Configure robust role-based access control (RBAC) for Granola workspaces, essential for enterprise-level data security and governance. This guide details setting up role hierarchies (Owner, Admin, Member, Viewer), defining granular permissions, integrating SSO/SCIM for automated provisioning, and implementing least-privilege access principles. It also covers advanced features like per-workspace sharing policies and detailed audit logging to ensure regulatory compliance.

This guide details the comprehensive setup of Granola for large-scale, multi-departmental enterprise environments. It covers creating isolated workspaces (e.g., Engineering, HR, Sales), integrating Identity Providers using SSO/SCIM, and implementing granular compliance controls (data retention, external sharing, MFA) to ensure data security and departmental autonomy.

A comprehensive reference architecture for deploying meeting intelligence platforms (like Granola) across large organizations. This blueprint details the core data capture pipeline, integration topology using middleware (Zapier), multi-workspace structure (Sales, HR, Engineering), and robust security layers (SSO, AES-256) to ensure automated workflows from meeting to action item across all departments.