Skill UI

This skill provides comprehensive guidance on implementing security best practices for Shopify applications. It covers critical topics such as secure API credential storage, verifying incoming webhooks using HMAC signatures, enforcing least-privilege access scopes, and setting Content Security Policies (CSP). Use this guide when building, auditing, or scaling a secure e-commerce integration.

This skill facilitates the deployment of WebContainer applications to popular hosting platforms like Vercel and Netlify. It handles complex configuration, including setting necessary COOP/COEP security headers. It is essential when developing modern web projects using WebContainers or the StackBlitz SDK, ensuring proper and secure deployment.

Provides a comprehensive production checklist specifically for WebContainer applications built using the StackBlitz SDK. This guide helps developers ensure that their web applications are robust and ready for deployment by checking essential aspects like security headers, cross-browser compatibility, and necessary fallback mechanisms.

This comprehensive guide details essential security practices for deploying WebContainers. It covers implementing Content Security Policy (CSP) headers, ensuring robust sandbox isolation, and performing rigorous input validation to mitigate common web vulnerabilities. Use this when developing applications with WebContainers or the StackBlitz SDK.

This guide covers essential security best practices for utilizing Together AI's OpenAI-compatible API for inference, fine-tuning, and model deployment. It provides code examples and architectural advice on secure API key management, robust webhook signature verification, input validation using schemas (like Zod), and implementing data redaction pipelines to protect sensitive information in logs and datasets. Essential for building secure AI applications.

A comprehensive guide and workflow for deploying static websites (e.g., Vue, React, Angular, Hugo, Jekyll) from a local environment to a production server using VSCode SFTP. This skill covers setting up secure SFTP connections, generating production-ready Nginx configurations (including security headers, caching, and HTTPS redirects), and providing a complete deployment checklist for smooth CI/CD-like workflows.

Provides comprehensive methods for handling sensitive customer data within Webflow, including detecting and redacting PII from form submissions and e-commerce orders. This guide ensures data processing adheres to global regulations like GDPR and CCPA, and establishes robust data retention policies for secure development.

Provides an enterprise-grade framework for managing Webflow access control using OAuth 2.0 and scope-based Role-Based Access Control (RBAC). This system enforces the principle of least privilege by mapping specific user roles (e.g., Viewer, Editor, Admin) to granular Webflow scopes. Key features include per-site token isolation and robust permission checking middleware, significantly enhancing security for complex SaaS integrations.

Provides a comprehensive checklist and technical guidelines for safely deploying Webflow Data API integrations to a production environment. Covers critical areas like token security, rate limit management, implementing circuit breakers, setting up health checks, and handling various API errors to ensure reliable, high-availability service.

This guide details comprehensive security best practices for Webflow Data API v2. It covers crucial topics such as selecting the correct token type, implementing least privilege access scopes, secure secret rotation, and verifying webhook signatures. Use this knowledge when building or auditing Webflow integrations to ensure robust data security and system reliability.

A comprehensive solution for defining, registering, and checking administrative permissions in a structured manner. It utilizes a three-layer system: domain schemas for defining entities and scopes, injectable features for programmatic checking, and UI components/hooks for presentation. Ideal for building complex, multi-entity administrative interfaces with granular access control.

This module provides a comprehensive set of abstractions for managing security within web administration interfaces. It includes essential hooks (useAuthentication, useIdentity), context managers, and utilities for handling roles, permissions, and the full login/logout lifecycle. Developers should use these standardized components to ensure consistent, robust, and scalable security implementation across the entire application.