Skill UI

Set up comprehensive observability for Shopify app integrations. This skill tracks crucial metrics like GraphQL query costs, REST rate limit consumption, webhook delivery success, and API latency. It is essential for production monitoring, setting up robust Prometheus metrics, and configuring alerts for performance bottlenecks in e-commerce SaaS environments.

A comprehensive guide to implementing a production-ready Shopify app architecture using the Remix framework. This template covers ideal project structure, integrating Prisma for robust session storage, and implementing official Shopify patterns like Theme App Extensions and webhooks. Use this when starting a new e-commerce SaaS application on Shopify.

Provides an enterprise-grade framework for managing Webflow access control using OAuth 2.0 and scope-based Role-Based Access Control (RBAC). This system enforces the principle of least privilege by mapping specific user roles (e.g., Viewer, Editor, Admin) to granular Webflow scopes. Key features include per-site token isolation and robust permission checking middleware, significantly enhancing security for complex SaaS integrations.

Implement a comprehensive observability stack for Webflow Data API v2 integrations. This skill provides structured code using Prometheus metrics, OpenTelemetry distributed tracing, and structured logging (pino) to monitor API call frequency, latency, error rates, and rate limit usage. Ideal for developers building robust, production-grade Webflow-connected SaaS applications that require deep performance insights and reliable alerting.

This catalog provides essential TypeScript abstractions, types, and hooks for implementing robust multi-tenancy features in administrative interfaces. It helps developers manage the current tenant context, check tenant roles (e.g., root vs. non-root), and handle tenant state changes (enable/disable) across various modules. It is crucial for building scalable, secure, and multi-tenant SaaS platforms.

This guide provides detailed instructions for setting up a local development loop using the Wispr Flow voice-to-text API. It covers connecting via WebSocket (recommended for low latency) or REST API, handling authentication, and optimizing audio input. Ideal for building voice-powered applications, dictation tools, or integrating sophisticated voice command features into existing SaaS products.

Generates a complete, single-page SaaS landing page structure. This tool produces a fully contained HTML file, integrating required sections such as Hero, Features, Social Proof, Pricing, and Call-to-Action (CTA). It strictly adheres to an existing design system for colors, typography, and layout, making it ideal for product launches and marketing campaigns.

A comprehensive methodology for identifying critical vulnerabilities in transactional applications (e-commerce, fintech, SaaS). This goes beyond standard OWASP Top 10 checks, focusing on flaws like workflow bypass, state machine violations, price manipulation, and role boundary abuse. It guides testers to map application flows, identify hidden endpoints, and quantify the potential financial impact of logic failures.

This skill generates robust JSON-LD structured data markup for various web components, including blogs, FAQs, tools, and SaaS pages. By implementing standard Schema.org types (WebSite, Article, FAQPage, etc.), you can significantly improve your SEO, boost click-through rates (CTR), and provide clear context to both search engines and AI systems. Includes implementation guidance for modern frameworks like Next.js.

A comprehensive guide for threat hunting and detection engineering focused on identifying SSO and OAuth token abuse. It detects 'pass-the-cookie' and session replay attacks where attackers use stolen tokens (like cookies or refresh tokens) to move laterally across federated SaaS platforms (Entra ID, Okta) without needing credentials. Essential for post-incident scope analysis and validating T1550.001 coverage.