Agent skill · security · jeremylongshore

gamma-security-basics

Implement security best practices for Gamma integration.

Why this skill is useful

Adds executable scripts for secure API key management and access control patterns specific to Gamma integration that aren't in public docs.

What it needs

About 2k tokens when loaded. Last updated 2026-08-07. 2,604 stars on the source repository.

What this skill does

Gamma Security Basics Output Maintain a security receipt with identity scope, secret reference, access-review date, control result, owner, and redacted incident state. Do not include tokens or private content. Examples Use a scoped staging credential and fictional deck to verify least-privilege access, revoke it, and confirm access is denied without exposing content or credentials in evidence. Overview Security best practices for Gamma API integration to protect credentials and data. Prerequisites Active Gamma integration Environment variable support Understanding of secret management Instructions Step 1: Secure API Key Storage Environment Setup: Step 2: Key Rotation Strategy Step 3: Request Signing (if supported) Step 4: Access Control Patterns Step 5: Audit Logging Security Checklist [ ] API keys stored in environment variables [ ] .env files in .gitignore [ ] No keys in source code or logs [ ] Key rotation procedure documented [ ] Minimal permission scopes used [ ] Audit logging enabled [ ] Webhook signatures verified [ ] HTTPS enforced for all calls Error Handling Security Issue Detection Remediation ---------------- ----------- ------------- Exposed key GitHub scanning Rotate immediately Key in logs Log audit Filter sensitive data Unauthorized access Audit logs Revoke and investigate Weak permissions Access review Apply least privilege Resources Gamma Security Guide API Key Management OWASP API Security Next Steps Proceed to gamma-prod-checklist for production readiness.

How to use it

Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:

@skills jeremylongshore/gamma-security-basics

View the source on GitHub

Browse the @skills marketplace