Security

Build a composable CLI for Codex from API docs, an OpenAPI spec, existing curl examples, an SDK, a web app, an admin tool, or a local script.

Builds, runs, debugs, and operates applications on AWS Lambda MicroVMs — Firecracker-isolated, snapshot-resumable serverless compute environments running…

Reviews and authors Cloudflare Workers code against production best practices.

Build a new craftos_integrations provider end to end — acquire the vendor's API surface, decide the auth strategy, triage scope, generate the…

Implements and debugs deep links in Capacitor apps - custom URL schemes, iOS Universal Links (apple-app-site-association, Associated Domains entitlement)…

Security audit and vulnerability scanner for AI agent skills before installation.

Identify duplicate company records by domain and name, export audit CSVs for review, and guide merging.

Identify and suppress globally unsubscribed contacts to ensure legal compliance and reduce billing.

Identify and suppress hard-bounced contacts to protect email sender reputation.

Security-first skill vetting for AI agents.

Cross-reference and synthesise daily memory files into patterns, insights, and carry-forward items.

Inventory the integrations, service keys, legacy private apps, and internal tooling that call HubSpot APIs, and flag anything on legacy v1-v4 endpoints or…

Audit and remove unused, test, or deprecated forms from HubSpot.

Audit and remove unused, empty, or duplicate list definitions from HubSpot.

Audit and remove inactive, test, or deprecated workflows from HubSpot.

Building LLM tools with Vovk.ts — `deriveTools()` (procedures → tools) returning a `StandardToolV0[]` array, standalone tools via the `standard-tool` package…

Use when PixelLab (Pixel Lab) or Pip skill context is present for setup/auth (PIXELLAB_SECRET, bearer token), MCP/API routing, asset generation, endpoint…

Provision Microsoft Entra Agent Identity Blueprints, BlueprintPrincipals, and per-instance Agent Identities via Microsoft Graph, and configure OAuth 2.0 token…

AWS Cognito user authentication and authorization service.

Guides and best practices for working with Neon Serverless Postgres.

Query Prometheus monitoring metrics and alert rules.

Use when working with HashiCorp Vault REST API — health checks, init/unseal, auth login, KV read/write, policy management, token operations.

Validates whether an API request is correct based on provided inputs (method, URL, headers, body, auth, query params).

Use when building a custom UI (page, dashboard, buttons) that should wake the agent over a webhook, when the user must provide a webhook secret, or when…