Skill UI

This guide implements comprehensive policy guardrails for robust Salesforce integrations. It provides solutions for preventing SOQL injection vulnerabilities, detecting hardcoded credentials, throttling API usage at runtime, and enforcing code quality via custom ESLint rules and CI/CD checks. Use this when building secure, scalable, and compliant Salesforce applications.

This skill provides a comprehensive framework for security auditing LLM agents that possess external tools (file system access, command execution, network calls). It employs advanced dialogue probing techniques—such as command injection, path traversal, and SSRF attempts—to identify vulnerabilities where the agent might be induced to execute unexpected or malicious code, or access sensitive resources. Essential for red teaming and securing agent functionalities.

This module provides essential abstractions for managing and accessing environment configurations within an administrative panel. It offers two primary tools: the direct `EnvConfig` type for explicit imports and a `useEnvConfig` hook that retrieves the configuration instance via Dependency Injection (DI). This ensures that environment settings are accessed safely and consistently in both components and custom hooks.

This guide details how to implement a highly customized CMS field type within the Webiny framework. It covers extending DataFieldBuilder, defining complex validation logic, creating a FieldType.Factory, and proper registration using Dependency Injection (DI). Furthermore, it demonstrates module augmentation for enhancing TypeScript autocomplete in the fields registry, ensuring a complete, robust development workflow and exposing a fluent builder API.

A comprehensive guide on extending and customizing GraphQL APIs using the GraphQLSchemaFactory pattern. Learn how to add custom queries and mutations, define type definitions, and implement complex resolvers with per-request dependency injection (DI). Ideal for developers needing to inject backend services, use cases, and sophisticated business logic into their existing GraphQL schema.

This skill details the universal Dependency Injection (DI) pattern for Webiny web extensions. It is the foundational pattern used across all extension types (API, Admin, CLI, Infrastructure) to ensure type safety and automatic service provision. Learn how to use constructor injection, declare dependencies (like Logger, BuildParams, or CMS use-cases), and utilize the `createImplementation` factory to build robust, decoupled services.

Add custom HTTP endpoints (GET, POST, PUT, etc.) to the Webiny API alongside the GraphQL handler using <Api.Route> and HttpRouteHandler, with full dependency injection support.

This guide details the Use Case pattern for structuring robust business logic. Learn how to encapsulate specific operations, utilize Dependency Injection (DI), and enforce type-safe result and error handling using the Result monad. It covers best practices for creating, injecting, and overriding UseCases and defining domain-specific errors.

This guide details the architectural shifts when migrating existing Webiny v5 plugins to the v6 feature-based Dependency Injection (DI) model. It covers key patterns, such as converting ContextPlugins to DI Services, adapting event subscriptions to EventHandler features, and restructuring plugin arrays into feature registrations.

This guide details the usage of go.uber.org/dig, a powerful reflection-based container for Dependency Injection in Golang. It covers advanced patterns like using `Provide`/`Invoke` for service registration, grouping parameters with `dig.In`, managing multiple outputs with `dig.Out`, and handling named/grouped dependencies. This is essential for reliably wiring complex application graphs at startup.

A robust application framework for Go that combines a reflection-based Dependency Injection container (built on dig) with advanced features. It provides lifecycle hooks (OnStart/OnStop), a module system, and signal-aware run loops. It is ideal for building complex, long-running services like HTTP servers, daemons, and workers that require structured startup and graceful shutdown.

Logic Lens is an advanced AI skill that performs deep, formal logic-driven code review. Unlike standard linters, it analyzes code for complex issues like race conditions, security vulnerabilities (SQL injection, XSS), type safety flaws, and algorithmic errors across 9 critical risk categories. It is ideal for pre-merge PR reviews, auditing sensitive code paths, and refactoring complex business logic.