Skill UI

This skill provides comprehensive best practices for securing highly sensitive financial and tax data processed by SaaS platforms, such as handling SSNs, EINs, and bank details. It covers critical security mechanisms including API key lifecycle management, webhook signature verification (HMAC), robust input validation (Zod), and PII redaction to ensure compliance with standards like SOC 2 and industry best practices.

This comprehensive 'Hello World' guide serves as a foundational tutorial for Framer development. It demonstrates key skills across the ecosystem, including building functional plugins (UI interaction), creating customizable code components with property controls, implementing dynamic code overrides for sophisticated animations, and interacting with the Framer Server API for headless site data management. Ideal for developers starting a new Framer integration or mastering core API patterns.

A comprehensive guide to production-ready, robust coding patterns for Framer development. This resource covers key areas including type-safe CMS interactions, plugin state management hooks, reusable component architectures, and server API wrappers. Use this when refactoring existing SDK usage or establishing scalable coding standards for complex Framer integrations.

This guide provides comprehensive security best practices for developers building with Framer. It covers secure credential management (like API keys and Site IDs), implementing the principle of least privilege, and securing plugins and Server API connections. Use this when auditing your Framer setup or ensuring production-level security for sensitive data handling.

This comprehensive guide assists developers in upgrading the @hubspot/api-client SDK. It covers migrating between major API versions (e.g., v1 to v3, v3 to v4), addressing key breaking changes, and implementing modern authentication patterns, such as transitioning from API Keys to Access Tokens. Use this when integrating or maintaining HubSpot-dependent applications.

This comprehensive guide provides step-by-step instructions for deploying applications integrated with Klaviyo across major modern cloud environments, including Vercel, Fly.io, and Google Cloud Run. It covers essential DevSecOps practices, such as managing platform-specific secrets (API keys, webhook signing secrets), configuring middleware for secure webhook validation (HMAC), and implementing robust health checks to ensure a stable, production-ready deployment.

This skill guides you through installing and setting up the official Klaviyo SDK for both Node.js and Python. It covers essential steps including authenticating with a private API key, managing environment variables for secure credential storage, and initializing resource-specific API clients (e.g., Profiles, Events). Use this when building integrations that require programmatic access to Klaviyo's marketing data, such as tracking user events or managing contact profiles.

A comprehensive guide detailing security best practices for integrating with Klaviyo. Learn how to manage private and public API keys, implement least-privilege scoping for different environments (Dev, Staging, Prod), and critically, how to verify webhook payloads using HMAC-SHA256 signatures. This guide is essential for developers building robust and secure marketing automation pipelines.

This comprehensive guide assists developers in upgrading the klaviyo-api SDK and migrating code between different API revisions (v1/v2 to current REST API). It covers best practices for handling breaking changes, such as switching from ConfigWrapper to ApiKeySession patterns, adjusting property casing (snake_case to camelCase), and updating response access patterns to ensure robust and compliant Klaviyo integrations.

A deep dive into handling typed content blocks (text, image, tool_use, thinking, document) in LangChain 1.0. This skill standardizes multi-modal message composition, tool-call iteration, and complex content handling across providers like Claude, GPT-4o, and Gemini, solving key API discrepancies.

This guide outlines a robust, two-tier Continuous Integration (CI) strategy for validating Linktree link-in-bio API integrations. It utilizes mock unit tests to verify core functionality (link CRUD, reordering) without needing a live API key. Furthermore, it implements dedicated integration tests on the main branch merge, authenticating with a real Bearer token to confirm link ordering, analytics endpoints, and rate limit handling against the live Linktree API, ensuring production-ready code quality.

This comprehensive guide details common errors encountered when integrating with the Linktree API. It covers various HTTP status codes, such as 400 (Invalid URL), 401 (Authentication Failed), and 429 (Rate Limit). The document provides specific causes (e.g., expired keys, malformed data, plan restrictions) and actionable fixes, helping developers build stable and reliable link-in-bio services.