Skill UI

This guide provides comprehensive security best practices for integrating with BambooHR. It covers crucial topics like robust API key management (including quarterly rotation procedures), implementing HMAC webhook signature verification to prevent data tampering, and detailed guidelines for handling sensitive PII data (SSN, salary) to ensure compliance and data integrity.

This skill provides a comprehensive guide to implementing and managing BambooHR webhooks. It covers both global and permissioned webhook types, detailing the process from API setup to robust payload handling. Key security aspects include HMAC-SHA256 signature validation for ensuring data integrity and authenticity. Ideal for developers needing to build real-time employee synchronization triggers, process employee creation, updates, or deletions, and integrate BambooHR data into other enterprise systems.

This internal agent skill processes raw X/Twitter posts into structured bug candidates. It systematically performs parsing, content deduplication, PII redaction, reliability scoring, and classification. Finally, it clusters related reports using deterministic signatures, providing a highly organized output for efficient bug triage and analysis from large-scale social media streams.

A comprehensive guide detailing security best practices for integrating with ElevenLabs. It covers secure API key management using environment variables, implementing Git pre-commit hooks, and demonstrating robust webhook signature verification using HMAC-SHA256. This ensures secure data handling, replay protection, and proper voice data governance.

This guide provides a robust implementation for handling asynchronous webhooks from ElevenLabs. It covers the critical steps of receiving POST notifications (such as transcription completion, post-call audio, and failure events), performing secure HMAC-SHA256 signature verification, and routing the event data to specific processing handlers. Ideal for integrating ElevenLabs into conversational AI pipelines, ensuring data integrity and reliable background processing.

Provides comprehensive security guidelines and code patterns for integrating with the Fathom API. This module covers critical security concerns such as API key management, webhook signature verification, PII (Personally Identifiable Information) redaction, and robust input validation. It ensures compliance and protects highly sensitive meeting transcripts and confidential business data in production environments.

A comprehensive guide for securing highly sensitive fundraising and investor data managed within the Finta platform. This document covers critical security best practices, including secure API key management, webhook signature verification, robust input validation using libraries like Zod, and techniques for data redaction to prevent leaks. Essential for developers building integrations that handle confidential financial terms, valuations, and investor contact information.

This guide provides comprehensive security standards for integrating with the Flexport API. It covers critical best practices such as webhook signature verification, secure API key rotation, implementing least-privilege access controls, and data redaction for handling sensitive logistics and customs data. Essential for maintaining compliance and preventing data breaches in supply chain operations.

This comprehensive guide provides essential security best practices for deploying applications on Fly.io. It covers critical areas such as secrets management, private networking using WireGuard, securing TLS certificates, and properly scoping deploy tokens. The included functions demonstrate how to validate API tokens, verify webhook signatures, and validate deployment configurations to mitigate common cloud and application-level vulnerabilities.

This skill provides comprehensive best practices for securing highly sensitive financial and tax data processed by SaaS platforms, such as handling SSNs, EINs, and bank details. It covers critical security mechanisms including API key lifecycle management, webhook signature verification (HMAC), robust input validation (Zod), and PII redaction to ensure compliance with standards like SOC 2 and industry best practices.

A comprehensive guide to implementing real-time data synchronization and handling event triggers with Framer's API. This skill covers subscribing to CMS changes via WebSockets, implementing secure external webhook endpoints with signature validation, and integrating Framer plugin event listeners for dynamic interaction. Use this when building complex, event-driven web applications connected to Framer.

This skill demonstrates how to build a robust, event-driven indexing system for Glean. It processes real-time webhooks received from various source systems (like GitHub, Notion, Confluence), handling events such as document indexing, permission changes, and search anomalies. The solution includes critical components like signature verification and idempotent message handling to ensure data consistency and reliability.