Skill UI

This comprehensive guide details the ten most common mistakes and anti-patterns encountered when integrating with the Figma REST and Plugin APIs. It covers critical topics such as preventing oversized data fetches, managing rate limits, securing tokens, handling color format conversions, and optimizing data sync using webhooks instead of polling. Essential for code reviews and onboarding. Use when reviewing Figma code, onboarding new developers, or auditing an existing Figma integration.

A comprehensive guide detailing security best practices for the Hex data analytics platform. This covers secure API key management (read vs. run scopes), implementing least privilege access, validating webhooks, and redacting sensitive data from logs. Use this guide when auditing Hex security configuration or integrating secure data pipelines.

This skill provides comprehensive knowledge on setting up and handling real-time webhook events from Lucidchart. It details how to receive notifications—such as document creation, updates, sharing, and shape additions—via signed JSON payloads over HTTPS. Users can implement robust integrations for compliance auditing, triggering CI/CD pipelines, or notifying external collaboration tools like Slack.

This skill guides the design, implementation, and auditing of inclusive digital products based on WCAG 2.2 standards. It covers the POUR principles and provides technical guidance for generating semantic ARIA (Web) and native accessibility traits (iOS/Android). Use it when defining UI components, auditing compliance gaps, or ensuring robust keyboard navigation and focus management.

This guide details how to configure webhook notifications and utilize audit logs from CAST AI. It allows users to set up real-time alerts for critical cluster events like node scaling, cost threshold breaches, and security findings. By integrating with Slack, PagerDuty, and custom HTTP endpoints, users can achieve comprehensive monitoring and automated response for their infrastructure.

This skill performs comprehensive regulatory gap analysis across major compliance frameworks, including GDPR, CCPA, ADA, PCI-DSS, and CAN-SPAM. It analyzes live websites and codebases to produce a detailed compliance scorecard, identifies specific non-compliant gaps, and generates a prioritized remediation roadmap with effort estimates. Essential for businesses ensuring legal adherence across multiple global jurisdictions.

A comprehensive checklist for deploying and auditing Figma REST API integrations in a production environment. It covers critical best practices including secure authentication, robust error handling (backoff, retries), rate limit management, continuous monitoring setup, and secure webhook implementation, ensuring a stable and reliable product launch.

This comprehensive guide outlines essential security protocols for integrating with the Figma API. It covers best practices including securely storing Personal Access Tokens (PATs), implementing least-privilege scopes, managing token rotation lifecycles, and verifying incoming webhook payloads. Use this when setting up, auditing, or maintaining production-grade Figma integrations to ensure data integrity and prevent unauthorized access.

A senior-level tool for performing deep-dive technical SEO audits and site architecture mapping. It analyzes crawl health, indexing blocks, sitemap integrity, and structural issues (like canonicalization, link flow, and crawl budget waste). Use this to diagnose complex Google Search Console errors and propose a full, engineered roadmap for website stabilization and optimization.

This skill establishes a secure, two-way synchronization bridge between a local ARIS development directory and an Overleaf project. It allows users to maintain collaborative editing in the Overleaf web UI while enabling local ARIS pipelines to run audits, process fixes, and ensure data integrity. Supports pull (remote to local) and push (local to remote) workflows, managing complex diffs and version control.

This guide details best practices for securing Persona identity verification implementations. It covers critical security measures such as API key rotation, webhook HMAC verification, encrypting Personally Identifiable Information (PII) at rest, and maintaining comprehensive audit logs. Use this when integrating Persona into a production system requiring high data security and compliance.

A comprehensive guide detailing the 10 most common anti-patterns and mistakes when developing apps for the Shopify platform. Covers critical topics including mandatory GraphQL usage, handling userErrors, GDPR compliance, webhook timeouts, and secure API practices. Essential for code audits and App Store preparation.