Skill UI

This guide provides comprehensive security best practices for integrating with the Juicebox API. It covers critical areas such as secure API key management (using secrets managers), robust webhook signature verification, input validation using schemas, and essential data protection techniques like PII redaction. It ensures compliance with global regulations like GDPR and CCPA when handling sensitive professional and contact data.

This skill provides comprehensive management for team access to AI APIs, ensuring security and accountability. It allows setting up role-based access control (admin, editor, viewer), implementing per-member and total team usage quotas, and managing separate API keys across Development, Staging, and Production environments. Ideal for scaling AI usage in enterprise settings.

This guide provides essential security best practices for implementing Langfuse, an LLM observability platform. It covers critical areas such as secure credential management (public vs. secret keys), implementing PII scrubbing techniques before tracing, hardening self-hosted environments, and enforcing the principle of least privilege. Use this guide to ensure your LLM integrations meet strict data privacy standards (e.g., GDPR, HIPAA).

A specialized security auditor for Laravel applications. It analyzes code, APIs, and configurations against OWASP standards to detect vulnerabilities such as XSS, IDOR, SQL injection, and misconfigurations. Ideal for reviewing backend logic to ensure robust data protection and authorization.

This comprehensive checklist guides the deployment of AI agents into a live production environment. It covers critical areas including security best practices (API key management, SSO), robust error handling, monitoring setup, operational runbooks, and compliance adherence (HIPAA, GDPR). Use this when validating an agent for go-live to ensure maximum reliability and stability.

This comprehensive guide outlines essential security best practices for implementing and using Lindy AI agents. It covers crucial topics such as robust API key management, webhook signature verification, strict agent permission scoping, and secure data handling protocols. Use this resource when auditing agent activity, configuring enterprise security features (SSO/SCIM), or ensuring compliance and minimizing the attack surface area of autonomous AI systems.

This guide details secure methods for connecting external applications to the Linear API. It covers essential security practices, including secure storage of API keys using environment variables, implementing OAuth 2.0 with PKCE for robust authentication, managing token refresh cycles, and verifying webhook signatures using HMAC-SHA256. Essential for building production-grade, secure integrations.

Implement robust, structured logging for API requests, capturing performance metrics, correlation IDs, and detailed security audit trails. This skill ensures compliance by handling PII redaction and providing comprehensive, JSON-formatted logs suitable for ELK Stack or Loki. Essential for debugging, performance analysis, and maintaining SOC 2 compliance in distributed microservices.

A comprehensive guide detailing security best practices for integrating with Lokalise. Covers strategies for managing API token scopes (read-only vs. read-write), enforcing the principle of least privilege, validating translated content for XSS or credential leakage, verifying webhook secrets, and securing CI/CD pipelines against hardcoded secrets. Essential for developers and DevOps engineers.

This comprehensive guide provides templates for integrating MaintainX API testing into automated CI/CD pipelines. It covers multiple stages, including unit tests (mocked), live integration tests against staging environments, and security scans (like gitleaks). Use this when setting up robust, automated quality gates for your MaintainX SaaS integrations.

This guide demonstrates how to implement robust Role-Based Access Control (RBAC) for MaintainX integrations using TypeScript and Express. It defines multiple user roles (Admin, Manager, Technician, Viewer) with specific, granular permissions across various resources (work orders, assets, locations). The implementation utilizes permission middleware and scoped API keys to ensure that users can only perform actions designated by their assigned role, enforcing security and data integrity at the API level.

This guide teaches comprehensive security hardening for API integrations. Learn best practices for credential management (using environment variables/secret managers), implementing git hooks to prevent secret leaks, robust input validation (using Zod), structured audit logging, and mandatory key rotation procedures, ensuring system compliance and operational security.