Skill UI

A comprehensive guide for engineers, architects, and DevOps teams on implementing General Data Protection Regulation (GDPR) best practices. This skill covers Privacy by Design, data minimization, purpose limitation, retention policies, secure API design, and compliant logging practices. Use it when handling any personal data, designing new features, or reviewing systems for data privacy compliance.

Defines Salesforce Lightning Web Component, Aura, and Visualforce quality/security standards covering SLDS 2 styling, accessibility (WCAG 2.1 AA), data access patterns, component communication rules, XSS/CSRF protections, view state management, and Jest testing requirements for guided UI development and reviews.

This guide provides essential security practices for integrating with the AppFolio platform. It covers secure API credential management, implementing robust webhook signature verification, validating incoming tenant data payloads, and redacting sensitive PII (like SSNs and bank accounts) from logs. Use this when building integrations that handle owner or tenant financial data to ensure compliance and prevent data breaches.

A comprehensive guide detailing security best practices for integrating with ElevenLabs. It covers secure API key management using environment variables, implementing Git pre-commit hooks, and demonstrating robust webhook signature verification using HMAC-SHA256. This ensures secure data handling, replay protection, and proper voice data governance.

This comprehensive guide details the process of implementing a secure and robust system for handling Palantir Foundry webhook events. It covers key steps including API-based webhook registration, mandatory signature verification with replay protection, sophisticated event routing for various object lifecycles (create, update, delete), and ensuring idempotent processing using caching mechanisms like Redis. Use this when external microservices must react reliably and immediately to changes within the Foundry Ontology or data assets.

This comprehensive skill provides a robust framework for receiving and processing SalesLoft webhooks in real-time. It includes critical logic for HMAC-SHA256 signature verification and replay protection. The system efficiently routes various sales events (e.g., email opened, call completed, person updated) to sync data with external CRMs or operational systems, while ensuring data integrity through idempotency checks using Redis.

This skill simulates a Data Protection Officer (DPO) audit, pressure-testing privacy compliance across six critical, Article-cited GDPR areas. It is essential for pre-annual audits, post-breach assessments, DPA investigations, and M&A due diligence, ensuring readiness across RoPA, lawful basis, DPIA, DSAR, and international data transfers.

This skill demonstrates how to exploit the Windows Data Protection API (DPAPI) to extract sensitive, encrypted secrets, including saved user credentials, browser logins, RDP passwords, and vault data. It covers online, offline, and domain-wide decryption techniques, essential for post-exploitation red team engagements and penetration testing.