Skill UI

A comprehensive SDK guide for managing secrets and cryptographic keys within Azure Key Vault using TypeScript. It provides methods for creating, retrieving, listing, rotating, and performing advanced cryptographic operations such as encryption, decryption, signing, and key wrapping. Ideal for secure application development and infrastructure secret management.

This SDK provides comprehensive Java support for managing secrets within Azure Key Vault. It enables developers to securely store, retrieve, update, list, delete, and recover sensitive configuration data, such as API keys, database passwords, and connection strings. It is essential for building secure, production-ready applications that comply with best security practices.

This comprehensive skill guide details essential security best practices for modern application development. It covers identifying and mitigating common vulnerabilities such as hardcoded secrets, SQL injection, XSS, and CSRF. Use this when implementing authentication, handling user input, managing sensitive credentials, or building new API endpoints to ensure robust and secure code.

This skill functions as an expert in workflow automation, specializing in designing and implementing robust CI/CD pipelines and GitHub Actions workflows. It guides users through automating the entire development lifecycle—from building and testing to secure deployment. By establishing clear stages, handling secrets, and defining rollback strategies, it ensures consistency, reduces manual effort, and accelerates delivery while maintaining high quality and security standards.

This guide provides methods to implement robust data handling, secret detection, and compliance patterns within code reviews (e.g., GDPR, CCPA). It teaches users how to configure CodeRabbit to exclude sensitive files (like .env or keys), detect hardcoded secrets, limit the review scope to active source code, and ensure that PII is properly handled during the CI/CD process.

This skill provides a comprehensive guide to configuring CodeRabbit for advanced, security-focused code reviews. It teaches how to implement rules for detecting hardcoded secrets, common vulnerabilities (like SQL injection and XSS), and enforcing secure coding standards across APIs, databases, and infrastructure code. Use this when hardening a codebase's security posture or ensuring compliance with industry standards.

Detects operations in cryptographic code that leak secrets via timing side channels, guiding developers through multi-language analysis and CLI flags for warnings, filtering, architecture, and optimization levels.

Constant-time testing spots timing side channels in crypto code by verifying execution paths stay independent of secrets, guiding security reviews during audits and pull requests.

Generates production-ready Kubernetes deployment, service, ingress, and autoscaler manifests using best practices such as health checks, TLS, and resource limits. Use this when creating or updating deployments, services, ConfigMaps, Secrets, or other Kubernetes resource manifests for any application.

A comprehensive guide to avoiding common pitfalls when using AI-powered IDEs like Cursor. It covers best practices for AI interaction, secure coding habits (handling secrets, credentials), project configuration (rules, ignore files), and performance optimization. Essential for maintaining high code quality and security in AI-assisted workflows.

This skill provides a comprehensive pipeline for deploying Customer.io integrations to major production cloud platforms, including Google Cloud Run, Vercel, AWS Lambda, and Kubernetes. It details best practices for secure deployment using dedicated secrets managers, integrating robust health check endpoints, and implementing blue-green strategies, ensuring reliable and scalable CI/CD workflows.

This comprehensive guide details essential security best practices for integrating with Customer.io. It covers secure credential storage using secrets managers, sanitizing Personally Identifiable Information (PII) via hashing, verifying webhook signatures (HMAC-SHA256) to ensure data integrity, and establishing procedures for API key rotation to maintain compliance with GDPR/CCPA regulations.