Skill UI

This skill provides implementation patterns for utilizing Runway's AI video generation and creative platform. It covers setting up the SDK, generating videos from images, and handling common API errors (like insufficient credits or unauthorized access). It is designed for developers needing to integrate secure, high-quality AI video workflows into their applications.

This guide implements comprehensive policy guardrails for robust Salesforce integrations. It provides solutions for preventing SOQL injection vulnerabilities, detecting hardcoded credentials, throttling API usage at runtime, and enforcing code quality via custom ESLint rules and CI/CD checks. Use this when building secure, scalable, and compliant Salesforce applications.

A comprehensive guide detailing best practices for securing Salesforce integrations and API access. It covers configuring Connected Apps with minimum OAuth scopes, implementing least privilege access, establishing dedicated integration users, and enforcing Field-Level Security (FLS). Essential knowledge for robust API development, security audits, and maintaining data integrity within the Salesforce ecosystem.

This comprehensive guide outlines best practices for securing SalesLoft API access and integrations. It details secure token lifecycle management (OAuth refresh), implementing robust webhook signature verification using HMAC-SHA256 to prevent replay attacks, and enforcing scope minimization for least-privilege access. Use this when designing production-grade, secure enterprise integrations.

This guide details how to deploy SerpApi-powered search functionality into production environments using modern serverless platforms like Vercel and Google Cloud Run. It critically emphasizes the security requirement: all API calls must be proxied through a secure backend endpoint and must never expose the API key to client-side browsers, ensuring robust and secure search integrations.

This guide outlines essential security best practices for managing and protecting your SerpApi API key. Since the key grants full account access, developers must never expose it in client-side code. It details how to implement secure backend proxies, manage environment variables using secret managers, set up rate limiting to prevent abuse, and monitor usage patterns in production environments.

Implement comprehensive automated policy enforcement for Shopify apps, ensuring security and adherence to App Store guidelines. This skill includes ESLint rules for detecting hardcoded API secrets, enforcing GraphQL query cost budgets, and running pre-commit hooks and CI checks for critical compliance validations (e.g., GDPR webhooks). Use it when hardening a production-ready Shopify application.

A comprehensive checklist for deploying Shopify apps to production or submitting to the App Store. It covers critical areas including API versioning, mandatory GDPR compliance webhooks, webhook security best practices, rate limit resilience, and App Store listing requirements. Use this guide when preparing for a major launch or auditing existing compliance gaps to ensure maximum stability and security.

This skill provides comprehensive guidance on implementing security best practices for Shopify applications. It covers critical topics such as secure API credential storage, verifying incoming webhooks using HMAC signatures, enforcing least-privilege access scopes, and setting Content Security Policies (CSP). Use this guide when building, auditing, or scaling a secure e-commerce integration.

This guide provides essential security and implementation guidance for automating TechSmith's screen capture (Snagit) and video editing (Camtasia) workflows. It covers using the Snagit COM API, best practices for batch rendering with Camtasia CLI, and technical details for scripting in PowerShell and Python using pywin32. It also addresses common error handling scenarios like permission issues and file locking, ensuring robust automation.

This guide covers essential security best practices for utilizing Together AI's OpenAI-compatible API for inference, fine-tuning, and model deployment. It provides code examples and architectural advice on secure API key management, robust webhook signature verification, input validation using schemas (like Zod), and implementing data redaction pipelines to protect sensitive information in logs and datasets. Essential for building secure AI applications.

This skill provides enterprise-grade Role-Based Access Control (RBAC) patterns specifically for Veeva Vault deployments in regulated environments. It guides developers on implementing advanced features while maintaining strict compliance standards. Key considerations include validating API changes against compliance requirements, utilizing VQL for efficient data retrieval, and managing security profiles for robust access control.