Skill UI

This script collects comprehensive diagnostic evidence necessary for resolving persistent Shopify issues. It gathers critical data points such as API version compatibility, access scopes, GraphQL and REST rate limit status, and environment details, packaging everything into a single, redacted archive for easy submission to technical support. Use this when troubleshooting complex platform errors or preparing a detailed support ticket.

This skill provides comprehensive guidance on implementing security best practices for Shopify applications. It covers critical topics such as secure API credential storage, verifying incoming webhooks using HMAC signatures, enforcing least-privilege access scopes, and setting Content Security Policies (CSP). Use this guide when building, auditing, or scaling a secure e-commerce integration.

Provides an enterprise-grade framework for managing Webflow access control using OAuth 2.0 and scope-based Role-Based Access Control (RBAC). This system enforces the principle of least privilege by mapping specific user roles (e.g., Viewer, Editor, Admin) to granular Webflow scopes. Key features include per-site token isolation and robust permission checking middleware, significantly enhancing security for complex SaaS integrations.

This guide details comprehensive security best practices for Webflow Data API v2. It covers crucial topics such as selecting the correct token type, implementing least privilege access scopes, secure secret rotation, and verifying webhook signatures. Use this knowledge when building or auditing Webflow integrations to ensure robust data security and system reliability.

This skill provides a robust, schema-driven solution for managing and enforcing permissions in administrative user interfaces. It allows developers to define complex permission structures (the domain schema) and automatically generates associated UI forms, injectable permission checks, and component props. Use it to add granular permission controls to any admin section, supporting multi-entity, complex access scopes (e.g., full/own), and various operational actions.

This API provides key-value store abstractions, enabling developers to manage persistent or temporary data within their web services. It offers two distinct scopes: a global (non-tenant-scoped) store and a tenant-scoped store. This is essential for applications requiring structured data management, such as application settings, caching mechanisms, or session data, while maintaining clear data isolation.

This tool automates the OAuth 2.0 scope minimization review process. It identifies over-permissioned third-party application integrations, excessive API scopes, and risky OAuth consent patterns across identity providers. It is crucial for security audits, compliance (GDPR, SOC 2), and enforcing the least-privilege principle for cross-boundary data access.