Skill UI

A comprehensive workflow for discovering, integrating, and utilizing third-party APIs and SDKs. This skill guides the process by first detecting the project language, ensuring necessary guidelines and skills are present, systematically fetching API details, and providing structured guidance on authentication, model usage, and endpoint implementation. It tracks integration progress by recording specific development milestones (e.g., SDK setup, first call made).

A comprehensive guide to setting up a fast, reproducible local development environment for BambooHR integrations. This workflow incorporates hot reloading, API mocking (using MSW), and robust unit/integration testing. It allows developers to establish a rapid, isolated, and stable iteration cycle for building or testing third-party HR platform connections.

A comprehensive guide to implementing secure integration practices for Linktree APIs. Covers critical topics including secure secret management, robust webhook signature verification (HMAC-SHA256), input sanitization against XSS, and data redaction of Personally Identifiable Information (PII). Essential for developing resilient and secure third-party integrations.

This guide provides comprehensive methods for building robust change detection and event handling within Notion workspaces. It compares the reliability, complexity, and latency of three approaches: polling using last_edited_time, utilizing native webhooks, and using third-party connectors. Learn how to implement reliable, incremental synchronization, change feeds, and event-driven workflows using the Notion API to ensure data consistency and near real-time updates.

This guide demonstrates how to set up a secure and robust webhook endpoint to process identity verification events from Persona. It covers essential security practices, including HMAC signature verification using TypeScript and Express, handling critical KYC lifecycle events (like inquiry approval/declination), and implementing idempotent processing to prevent data duplication. Ideal for integrating third-party identity services into a web application.

This skill scans live websites or local codebases to detect all data collection signals, including cookies, analytics, forms, and third-party processors. It then generates a comprehensive, 12-section privacy policy tailored for GDPR and CCPA compliance. The system maps detected data touchpoints to specific legal bases (Consent, Contract, etc.), ensuring the resulting policy accurately reflects the actual data practices of your application or website.

This comprehensive, zero-trust security auditor scans third-party AI agent skills before installation. It performs a rigorous 6-phase review process, analyzing surface patterns, script integrity, permissions, and supply chain risks. It is designed to detect malicious payloads, credential theft, instruction overrides, and prompt injection attacks, ensuring secure AI development and deployment.

A comprehensive tool for BizOps and VMO operators to conduct proactive, multi-dimensional vendor performance audits. It scores SaaS and third-party vendors using weighted criteria (reliability, security, support), tracks SLA compliance to identify potential credit claims, and classifies third-party risk across critical vectors (data, financial, regulatory). Ideal for quarterly vendor health checks and defensible renewal recommendations.

This guide details how to establish SAML 2.0 identity federation between on-premises Active Directory (using AD FS or third-party IdP) and Microsoft Entra ID. It covers hybrid identity architectures, configuring federation models (AD FS, PHS, PTA), and implementing the full SAML authentication flow. Essential for extending on-premises authentication authority to cloud resources and maintaining security compliance.

This tool automates the OAuth 2.0 scope minimization review process. It identifies over-permissioned third-party application integrations, excessive API scopes, and risky OAuth consent patterns across identity providers. It is crucial for security audits, compliance (GDPR, SOC 2), and enforcing the least-privilege principle for cross-boundary data access.

A comprehensive workflow for establishing and maturing a Third-Party Risk Management (TPRM) program. This guide covers the entire vendor lifecycle, from initial inventory and risk tiering to conducting due diligence (SOC 2, ISO 27001), embedding security requirements in contracts, and ensuring continuous monitoring and secure offboarding. Essential for compliance and supply chain risk management.

A comprehensive resource containing official, managed integration examples for popular third-party services (Stripe, OpenAI, Supabase, etc.). This library provides canonical patterns for connecting external APIs into an Expo application. Users can utilize it in two primary ways: adapting the pattern into an existing project (most common) or scaffolding a new greenfield application.