MCP App StoreMCP App Store
from claude-code-plugins-plus-skills2,549
Practical security best-practices for integrating with the Apollo.io API: safe key storage, PII redaction, minimal permissions, rotation, and automated audit ch
Provides a compact, actionable playbook for securing Apollo.io API integrations. It explains how to store and rotate API keys safely, redact PII from logs, use least-privilege keys for read-only vs full-access operations, and run automated checks to detect hardcoded keys or insecure query-parameter auth. Concrete code examples (TypeScript) and audit snippets are included so engineers can adopt the patterns quickly.
Use this skill when building or auditing services that call Apollo.io: during onboarding of Apollo integrations, before deploying to production, or as part of a security review focused on API key leaks, logging hygiene, and rotation procedures. Good for dev, staging, and production checklists.
Designed for Claude Code and similar code-focused agents that can read and apply TypeScript/Node.js examples. The guidance is general and applies to any CI/CD or secret-management workflow.
Apollo.io API security best-practices skill covering key storage, PII redaction, scoped clients, key rotation, and audit checks. Contains well-written TypeScript code snippets within SKILL.md but no standalone executable scripts. Strong security guidance with proper use of env vars and secret managers rather than hardcoded credentials.
Clean skill with no security concerns. All code is example/snippet format, not executable scripts. The grep-based audit snippet in Step 5 uses execSync which has minor shell injection surface but is presented as guidance, not a runnable script.
Navan Migration — Deep Dive
End-to-end migration playbook for moving from SAP Concur or legacy TMC to Navan: data export, user provisioning (SCIM/CSV), policy recreation, parallel running
Cursor Hello World Tutorial
A concise 10-minute hands-on tutorial demonstrating Cursor's Tab completion, Chat, Inline Edit, and Composer features for getting started quickly.
Contagious — STEPPS Virality Framework
Apply the STEPPS (Social Currency, Triggers, Emotion, Public, Practical Value, Stories) framework to engineer word-of-mouth and make content, products, or campa
Supabase SDK Patterns (TypeScript & Python)
Production-ready patterns for using Supabase clients in TypeScript and Python: client initialization, typed queries, auth, realtime, storage, RPC, and error-han
Speak Security Basics
Security best practices for integrating Speak: API key management, audio data privacy, student data protection, and COPPA/FERPA compliance for production deploy
Runway Prod Checklist
Production checklist and SDK patterns for integrating Runway (AI video/image generation) into production workflows.
RemoFirst — Core Workflow A
Onboarding workflow for RemoFirst: create employee records, upload compliance documents, and track country-specific onboarding status.
Klaviyo — Webhooks & Events
Patterns and reference code to receive, verify (HMAC-SHA256), route, and idempotently process Klaviyo webhook events in production services.
Lokalise Migration — Deep Dive
Step-by-step migration guide and tooling for moving translations from Crowdin/Phrase/POEditor into Lokalise, including transforms, uploads and validation.
React Context Setup
Automates guidance and code patterns for setting up React Context, providing step-by-step configuration and best-practice examples for frontend projects.
Yielding Bear — Unified LLM Routing
A unified LLM routing API that automatically routes requests to the cheapest capable model across providers to reduce inference cost by ~60-80%.
Reverse Engineer
Provides step-by-step guidance and best practices for binary reverse engineering: static analysis, dynamic tracing, disassembly, and documentation workflows for
Sandbox0 Integration
Guidance and templates for integrating Sandbox0 sandboxing into AI agents — CLI/SDK patterns, templates, volumes, network policy, and deployment choices.
FastAPI Project Templates
Creates production-ready FastAPI project scaffolds with async patterns, DI, middleware, and testing best practices for high-performance APIs.
OpenTestAI
Automated, high-confidence AI testing: bug detection, persona feedback, and prioritized test-case generation using many specialized tester profiles.
CTF Write-up Generator
Generate a concise, reproducible submission-style CTF writeup with a one-path solution script, metadata, and a short checklist for fast verification.
Integrated Finance (Membrane) Connector
Interact with Integrated Finance via the Membrane CLI to manage accounts, transactions, budgets, and reports; handles auth and proxy requests.
Minimal Run & Audit (repro reporting)
Execute a README-first smoke test and produce standardized reproducibility outputs (`repro_outputs/`) and PATCHES.md — trusted reporting for repo reproduction r