skills.rest
djd1m
djd1mCOMMUNITY
Explore all skills by this author →
GitHub

security-patterns

Provide security patterns for credential management, API access, and data governance.

Updated Apr 29, 2026
Search Tags:#encryption#rate-limiting#credential-management#jwt-auth#data-residency#152-fz#openai-api-key
One-click install
npx skills add https://github.com/djd1m/2026-PU-APR-LESSON-05-instanly-01 --skill security-patterns-djd1m
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-patterns
Source: https://github.com/djd1m/2026-PU-APR-LESSON-05-instanly-01/tree/main/.claude/skills/security-patterns
Command: npx skills add https://github.com/djd1m/2026-PU-APR-LESSON-05-instanly-01 --skill security-patterns-djd1m

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Provides security patterns and implementation guidance for credential management, API access, and regulatory compliance in ColdMail.ru.

Core Features & Use Cases

  • AES-256-GCM encryption for SMTP/IMAP credentials
  • OpenAI API key management and prompt safeguards
  • JWT httpOnly cookies and token lifecycle management
  • Rate limiting, input validation, and 152-FZ data residency controls
  • Audit logging and data deletion workflows
  • Data redaction and compliance checks

Quick Start

Review this guide and implement AES-256-GCM encryption for credentials and httpOnly cookies for authentication in your services.

Frequently Asked Questions about security-patterns

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement AES-256-GCM encryption for SMTP and IMAP credentials?▼

To implement AES-256-GCM encryption for SMTP and IMAP credentials, apply the provided battle-tested code patterns for secure credential management and key handling in your mail services.

How does JWT httpOnly cookie authentication work for API access control?▼

JWT httpOnly cookie authentication secures API access by managing token lifecycles and preventing client-side script access. The Skill provides concrete code samples for implementing this token security.

What is the best way to handle OpenAI API keys and prompt safeguards?▼

The best way to handle OpenAI API keys involves applying specific management patterns and prompt safeguards. This Skill provides normative rules to redact sensitive data and protect API interactions.

How do I configure rate limiting and input validation for mail warmup components?▼

To configure rate limiting and input validation for mail warmup components, utilize the provided security patterns. These patterns enforce API access controls and protect against abusive traffic.

Does this approach support 152-FZ data residency and data deletion workflows?▼

Yes, this approach supports 152-FZ data residency by applying specific compliance controls. It includes concrete patterns for audit logging and managing data deletion workflows across your components.

Related Skills

Explore More Legal & Compliance Skills→
KrishavRajSinghKrishavRajSingh

email

Send and receive emails via IMAP/SMTP using curl.

Community
Intermediate
AlsKozlovAlsKozlov
17

policy-monitor

Detect gaps between published 152-FZ policies and actual data processing practices.

Community
Intermediate
aleonsaaleonsa

fastapi-security

Implement JWT authentication, RBAC, CORS, rate limiting, and security headers for FastAPI applications.

Community
Advanced
cornmanwtfcornmanwtf

secrets-management

Integrate vaults, secret rotation, and encryption for secure credential handling.

Community
Advanced