Skill UI

This guide details how to establish secure API access to the Procore construction management platform. It utilizes the OAuth2 client credentials flow, allowing developers to obtain necessary access tokens using client IDs and secrets. This setup is crucial for integrating custom applications to manage projects, retrieve RFIs, or handle submittals programmatically.

This skill provides detailed patterns for integrating the Ramp Developer API for robust corporate card and expense management. It guides developers through the complete workflow, including OAuth2 token acquisition and making API calls (e.g., fetching card data), ensuring accurate and reliable financial data synchronization in a production environment.

This guide provides implementation patterns for integrating corporate card and expense management using the Ramp Developer API. It demonstrates best practices for OAuth2 authentication, token management, and performing core financial operations, such as listing cards. Use this when building applications that require synchronization with Ramp's financial data.

This skill provides implementation patterns for interacting with the Ramp Developer API, focusing on security basics, OAuth2 authentication, and managing corporate card and expense data. It guides developers through obtaining access tokens, querying card information, and handling common API errors, making it essential for integrating financial sync or expense tracking into custom applications.

A comprehensive guide providing production-ready patterns for integrating with Salesforce using jsforce (TypeScript) and simple-salesforce (Python). These patterns cover essential topics such as implementing singleton connection management with automatic token refresh, defining typed sObject interfaces, building type-safe SOQL query builders, and wrapping API calls with robust error handling mechanisms. Ideal for developers refactoring existing Salesforce integrations or establishing standardized team coding practices.

This comprehensive guide outlines best practices for securing SalesLoft API access and integrations. It details secure token lifecycle management (OAuth refresh), implementing robust webhook signature verification using HMAC-SHA256 to prevent replay attacks, and enforcing scope minimization for least-privilege access. Use this when designing production-grade, secure enterprise integrations.

This guide details how to build modern, custom headless storefronts using Shopify's Storefront API and Cart API. It covers key functionalities like product querying, cart management (adding/updating lines), and initiating the checkout flow. Designed for developers building client-facing e-commerce experiences, it emphasizes the use of public access tokens for decoupled, highly customizable online stores.

This guide provides comprehensive steps for installing the official Webflow JS SDK (`webflow-api`) and securely configuring authentication. It covers both API Token setup for server-side tools and the full OAuth 2.0 authorization flow for public, user-facing applications. Use this when building web integrations or automated workflows that require programmatic access to Webflow data and site management.

Provides a comprehensive checklist and technical guidelines for safely deploying Webflow Data API integrations to a production environment. Covers critical areas like token security, rate limit management, implementing circuit breakers, setting up health checks, and handling various API errors to ensure reliable, high-availability service.

This guide provides detailed instructions on configuring API access for Workhuman, utilizing the OAuth 2.0 protocol. It is essential for integrating external Human Resources Information Systems (HRIS) or building custom workflows for employee recognition and rewards management. Users will learn how to obtain access tokens and programmatically interact with Workhuman's social recognition features.

A comprehensive playbook for identifying authentication vulnerabilities in web applications. Covers advanced topics including SQL injection login bypass, predictable password reset tokens, account enumeration techniques, multi-factor authentication bypass, and brute-force resistance checks. Essential for penetration testers assessing login mechanisms and session management.

This skill serves as an expert design-system guideline author, providing comprehensive, implementation-ready guidance for the Bento grid layout. It defines design tokens (color, spacing, typography), component anatomy, state management, and strict accessibility standards (WCAG 2.2 AA). Use this to create highly structured, scalable, and consistent UI/UX documentation for engineers and designers.