Skill UI

A comprehensive guide for securing highly sensitive fundraising and investor data managed within the Finta platform. This document covers critical security best practices, including secure API key management, webhook signature verification, robust input validation using libraries like Zod, and techniques for data redaction to prevent leaks. Essential for developers building integrations that handle confidential financial terms, valuations, and investor contact information.

This guide details how to implement robust Role-Based Access Control (RBAC) for Flexport API integrations. It addresses enterprise needs by allocating scoped API keys and managing permissions at an application layer. Users can define specific roles (Viewer, Operator, Finance, Admin) with granular permissions, ensuring that different user roles can only access necessary endpoints, thereby enhancing security and supporting multi-tenant architectures.

This guide provides comprehensive security standards for integrating with the Flexport API. It covers critical best practices such as webhook signature verification, secure API key rotation, implementing least-privilege access controls, and data redaction for handling sensitive logistics and customs data. Essential for maintaining compliance and preventing data breaches in supply chain operations.

This comprehensive guide provides essential security best practices for deploying applications on Fly.io. It covers critical areas such as secrets management, private networking using WireGuard, securing TLS certificates, and properly scoping deploy tokens. The included functions demonstrate how to validate API tokens, verify webhook signatures, and validate deployment configurations to mitigate common cloud and application-level vulnerabilities.

This skill provides comprehensive best practices for securing highly sensitive financial and tax data processed by SaaS platforms, such as handling SSNs, EINs, and bank details. It covers critical security mechanisms including API key lifecycle management, webhook signature verification (HMAC), robust input validation (Zod), and PII redaction to ensure compliance with standards like SOC 2 and industry best practices.

This guide provides comprehensive security best practices for developers building with Framer. It covers secure credential management (like API keys and Site IDs), implementing the principle of least privilege, and securing plugins and Server API connections. Use this when auditing your Framer setup or ensuring production-level security for sensitive data handling.

This guide details the security best practices for managing and using Hootsuite API credentials and tokens. It covers crucial topics such as secure storage of Client IDs, Client Secrets, and various tokens (Access/Refresh), emphasizing token rotation, implementing least privilege access, and securing OAuth 2.0 workflows in production environments.

A comprehensive guide for implementing robust policy enforcement and security guardrails in HubSpot integrations. This methodology covers secret scanning within CI/CD pipelines to prevent token leaks, utilizes ESLint rules for enforcing modern authentication practices, and leverages TypeScript for compile-time and runtime checks. Use this when setting up secure, scalable, and compliant codebases for HubSpot APIs.

A comprehensive guide to securing HubSpot API integrations. Details best practices for implementing least-privilege scopes, securely managing access tokens in environment variables, validating webhook signatures (v3), and executing proper token rotation procedures. Essential knowledge for building robust and secure applications connected to HubSpot.

This comprehensive guide outlines essential security best practices for integrating with Intercom. It covers secure token storage, robust webhook signature verification (X-Hub-Signature), implementing Identity Verification, and adhering to least-privilege OAuth scopes. Use this guide when building secure, production-ready applications that interact with Intercom APIs.

This skill helps users create specialized 'steering documents' or project memory for highly specific domains (e.g., API standards, testing strategies, security patterns). By analyzing the existing codebase and following predefined architectural principles, it synthesizes concise, actionable guides that capture technical patterns, best practices, and domain-specific rules, ensuring project consistency and knowledge retention.

A comprehensive checklist and guide for deploying Klaviyo integrations to a production environment. This utility covers all critical stages from pre-deployment validation to go-live, including API authentication, webhook security, robust error handling (retry logic, exponential backoff), and essential monitoring setup. It ensures stable and reliable execution of email and SMS marketing campaigns.