Skill UI

This skill provides a comprehensive framework for securely inspecting and automating complex microscopy data workflows against OMERO.server. It utilizes omero-py and BlitzGateway to manage metadata, annotations, ROIs, tables, and raw files. Ideal for conducting scoped inventory, structured data export/import planning, and performing reviewed write operations while adhering to strict data security protocols.

This skill guides the creation and auditing of truthful, accessible, and publication-ready scientific figures. It emphasizes maintaining data integrity by separating universal scientific principles from journal-specific rules. Users learn proper encoding (e.g., using position on common scales, handling uncertainty/missing data) and implementing designs with scope-aware Python libraries like Matplotlib and Seaborn, ensuring compliance with WCAG standards and maximizing scientific rigor.

This skill generates comprehensive and structured requirements documents for a new specification. It systematically aggregates context from project files, business rules, and technical constraints, ensuring all generated requirements focus on user-observable behavior (WHAT) rather than implementation details (HOW). It follows established standards like EARS format and includes a rigorous review gate to ensure scope clarity and completeness.

This guide details Algolia's security best practices, focusing on scoped API keys. It covers essential concepts like separating API keys for frontend vs. backend use, applying the principle of least privilege, and generating secured, time-limited, per-user keys. It also provides a complete procedure for key rotation to maintain a robust production security posture.

This guide provides essential security controls for integrating with the Attio REST API. It details best practices for managing API tokens, including applying least-privilege scopes, implementing secure secret management across various platforms (AWS, Vercel, etc.), executing proper token rotation, and validating webhook signatures to prevent common security vulnerabilities.

This guide details essential security best practices for integrating with the Canva Connect API. It covers securing OAuth 2.0 tokens, implementing least-privilege scopes, ensuring secure token storage (encryption and server-side handling), and verifying webhook signatures using JWK. Essential for building robust and secure Canva integrations.

This guide manages critical migrations for the Figma REST API, addressing scope deprecations (e.g., migrating 'files:read' to granular scopes) and upgrading from Webhooks V1 to V2. It is essential for developers updating existing integrations to ensure compatibility with the latest API standards and security features.

A comprehensive guide detailing security best practices for the Hex data analytics platform. This covers secure API key management (read vs. run scopes), implementing least privilege access, validating webhooks, and redacting sensitive data from logs. Use this guide when auditing Hex security configuration or integrating secure data pipelines.

This guide provides comprehensive instructions on configuring enterprise-grade access control for Intercom. It covers managing admin roles (Owner, Admin, Agent), implementing OAuth scope-based access for public apps, and enforcing granular permissions at the application layer using TypeScript examples. Essential for building secure, multi-tenant SaaS solutions.

Automatically scaffolds the initial project specification and requirements documents (spec.json and requirements.md). It guides the user through scope definition by checking existing project briefs, clarifying intent (who, current state, desired change), and generating a structured, ready-to-use foundation for development planning. Ideal for starting any new feature or project.

A comprehensive guide on implementing robust Role-Based Access Control (RBAC) for Klaviyo integrations. It details how to use scoped API keys and OAuth 2.0 flows to define granular read/write permissions across various resources (profiles, campaigns, events). This is essential for building secure, multi-tenant applications that require precise permission management.

A comprehensive debugging tool designed for diagnosing complex and intermittent issues within the Canva Connect API. It systematically tests various connection layers (DNS, TLS, Authentication, Scopes), monitors stuck or failed export jobs by polling job status, and verifies the OAuth token lifecycle. Use this when standard troubleshooting fails or when preparing detailed evidence for developer support.