Skill UI

A comprehensive guide for diagnosing and fixing common Shopify API errors, including HTTP status codes (401, 403, 422, 429) and GraphQL userErrors. This tool helps developers quickly identify the root cause of failed API requests, whether due to incorrect scopes, expired tokens, or validation issues, and provides actionable steps for resolution.

This script collects comprehensive diagnostic evidence necessary for resolving persistent Shopify issues. It gathers critical data points such as API version compatibility, access scopes, GraphQL and REST rate limit status, and environment details, packaging everything into a single, redacted archive for easy submission to technical support. Use this when troubleshooting complex platform errors or preparing a detailed support ticket.

This skill provides comprehensive guidance on implementing security best practices for Shopify applications. It covers critical topics such as secure API credential storage, verifying incoming webhooks using HMAC signatures, enforcing least-privilege access scopes, and setting Content Security Policies (CSP). Use this guide when building, auditing, or scaling a secure e-commerce integration.

Provides an enterprise-grade framework for managing Webflow access control using OAuth 2.0 and scope-based Role-Based Access Control (RBAC). This system enforces the principle of least privilege by mapping specific user roles (e.g., Viewer, Editor, Admin) to granular Webflow scopes. Key features include per-site token isolation and robust permission checking middleware, significantly enhancing security for complex SaaS integrations.

This guide details comprehensive security best practices for Webflow Data API v2. It covers crucial topics such as selecting the correct token type, implementing least privilege access scopes, secure secret rotation, and verifying webhook signatures. Use this knowledge when building or auditing Webflow integrations to ensure robust data security and system reliability.

This skill provides a robust, schema-driven solution for managing and enforcing permissions in administrative user interfaces. It allows developers to define complex permission structures (the domain schema) and automatically generates associated UI forms, injectable permission checks, and component props. Use it to add granular permission controls to any admin section, supporting multi-entity, complex access scopes (e.g., full/own), and various operational actions.

This API provides key-value store abstractions, enabling developers to manage persistent or temporary data within their web services. It offers two distinct scopes: a global (non-tenant-scoped) store and a tenant-scoped store. This is essential for applications requiring structured data management, such as application settings, caching mechanisms, or session data, while maintaining clear data isolation.

A reflection-based container for implementing dependency injection in Golang. It provides advanced features like Provide/Invoke, named values, value groups, optional dependencies, and scopes, allowing developers to structure and manage complex application object graphs at startup. Ideal for setting up application frameworks and services in Go.

This tool automates the OAuth 2.0 scope minimization review process. It identifies over-permissioned third-party application integrations, excessive API scopes, and risky OAuth consent patterns across identity providers. It is crucial for security audits, compliance (GDPR, SOC 2), and enforcing the least-privilege principle for cross-boundary data access.

This skill provides comprehensive code review capabilities for analyzing git diffs or specific file scopes. It goes beyond simple syntax checks, assessing code for reuse opportunities, quality issues (e.g., redundant state, leaky abstractions), efficiency bottlenecks, and adherence to standards. It utilizes multiple specialized sub-agents (Reuse, Quality, Efficiency, Clarity) to perform parallel, read-only audits. Optionally, it can apply high-confidence, behavior-preserving fixes upon user request.

Master professional Python testing practices using the pytest framework. This guide covers Test-Driven Development (TDD) methodology, advanced features like fixtures (with different scopes), parametrization, assertion techniques, and achieving high code coverage, ensuring robust and maintainable software.

This comprehensive tool generates professional, structured marketing agency proposals, pitch decks, and scopes of work. It guides the creation of all necessary components—including strategic analysis, service deliverables, KPI frameworks, pricing models, and terms & conditions—to help agencies formalize engagements, win new business, or expand existing partnerships.