Persona Security Basics

DevOps & Security

persona-security-basics

Persona Security Basics is an Agent Skill for devops & security published in the jeremylongshore/claude-code-plugins-plus-skills repository on GitHub: a SKILL.md instruction file an AI agent can load to do this task.

Secure Persona API keys, webhook secrets, PII handling in verification data. Use when working with Persona identity verification. Trigger with phrases like "persona security-basics", "persona security-basics".

View on GitHub ↗

QUICK START

How to use this skill

Bring this guide into your coding agent with a prompt tailored to the tool you use.

Open your project in Codex.
Copy and paste the prompt below.
Review files and risks before approving any action.

Prompt to paste

Inspect the Agent Skill at https://github.com/jeremylongshore/claude-code-plugins-plus-skills/blob/HEAD/plugins/saas-packs/persona-pack/skills/persona-security-basics/SKILL.md and all supporting files. Report provenance, permissions, scripts, dependencies, and security risks. Propose an exact installation into .agents/skills/persona-security-basics, but wait for my approval before writing files or running scripts.

Copying this prompt does not install or run the skill. Review third-party files before use.

persona security basics | sed 's/\b(.)/\u\1/g'

Overview

API key rotation, webhook HMAC verification, PII encryption at rest, audit logging.

Prerequisites

Completed persona-install-auth setup
Valid Persona API key (sandbox or production)

Instructions

Step 1: Implementation

import os, requests

HEADERS = {
    "Authorization": f"Bearer {os.environ['PERSONA_API_KEY']}",
    "Persona-Version": "2023-01-05",
}
BASE = "https://withpersona.com/api/v1"

# Secure Persona API keys, webhook secrets, PII handling in verification data
resp = requests.get(f"{BASE}/inquiries?page[size]=10", headers=HEADERS)
resp.raise_for_status()
inquiries = resp.json()["data"]
for inq in inquiries:
    print(f"  {inq['id']}: {inq['attributes']['status']}")

Output

API key rotation, webhook HMAC verification, PII encryption at rest, audit logging.

Error Handling

Error	Cause	Solution
401 Unauthorized	Invalid API key	Check PERSONA_API_KEY
429 Rate Limited	Too many requests	Implement backoff
404 Not Found	Wrong resource ID	Verify ID format

Resources

Next Steps

See related Persona skills for more workflows.