Skill UI

Automate the rotation of sensitive credentials, including RDS database passwords, API keys, and OAuth tokens, using AWS Secrets Manager and Lambda. This skill ensures secure credential lifecycle management, helping maintain system security and compliance by automatically updating credentials for various AWS and third-party services.

This client library provides robust functionality for securely accessing, storing, and managing sensitive secrets, such as passwords and API keys, within Azure Key Vault using the Rust programming language. It supports full CRUD operations including getting specific versions, updating properties, and listing all secrets, making it essential for building secure, enterprise-grade cloud applications.

This module provides comprehensive connection methods for Azure Database for PostgreSQL Flexible Server using Node.js and TypeScript with the pg package. It supports both traditional password authentication and modern, recommended Microsoft Entra ID (passwordless) authentication. The guide demonstrates best practices, including connection pooling, parameterized queries to prevent SQL injection, and robust transaction management (BEGIN/COMMIT/ROLLBACK).

This SDK provides comprehensive Java support for managing secrets within Azure Key Vault. It enables developers to securely store, retrieve, update, list, delete, and recover sensitive configuration data, such as API keys, database passwords, and connection strings. It is essential for building secure, production-ready applications that comply with best security practices.

Walks through broken authentication assessments by analyzing login flows, password policies, brute-force/credential-stuffing, and session/token security to document vulnerabilities and mitigation steps for web applications.

Guides analysts through assessing web authentication, credential stuffing, password policies, session tokens, and fixation flows to uncover broken authentication risks before attackers do.

This skill implements core Customer.io platform features, enabling sophisticated customer communication workflows. Key functionalities include sending transactional messages (e.g., receipts, password resets) and push notifications, executing API-triggered broadcasts to defined segments, and managing user attributes to dynamically drive segment membership. Ideal for building advanced, data-driven marketing automation and customer lifecycle management systems.

A comprehensive expert for configuration management, specializing in validating, testing, and ensuring the correctness of application settings. It creates robust validation schemas (e.g., JSON Schema) and performs critical checks, including identifying potential security secrets (API keys, passwords), ensuring data consistency across different environments (development, staging, production), and enforcing type safety for reliable deployments.

Guides users through password hash generator tasks within the Security Fundamentals stack, outlining best practices, secure coding patterns, and validation checks tailored for authentication workflows.

Automates guidance on evaluating password quality, recommending best practices, implementing validators, and verifying compliance within security fundamentals workflows.

Comprehensive CLI reference for penetration testing tools spanning network scanning, exploitation, password cracking, and web testing to speed up authorized security assessments.

Performs OWASP-guided security scans on PostgreSQL and MySQL databases via the database-security-scanner plugin, identifying weak passwords, SQL injection risks, and misconfigurations while generating reports and remediation advice.