jeremylongshore

@jeremylongshore source repo

3.9k skills
0 followers
last month last updated

▌
Salesforce Prod Checklist · jeremylongshore
'Execute Salesforce production deployment checklist with sandbox testing and rollback. Use when deploying Salesforce integrations to production, preparing for launch, or implementing go-live procedures. Trigger with phrases like "salesforce production", "deploy salesforce", "salesforce go-live", "salesforce launch checklist", "salesforce sandbox to prod". '

11 installs
▌
Stackblitz Prod Checklist · jeremylongshore
'Production checklist for WebContainer apps: headers, browser support, fallbacks. Use when working with WebContainers or StackBlitz SDK. Trigger: "stackblitz production". '

5 installs
▌
Windsurf Flows Automation · jeremylongshore bundle
'Create and manage Windsurf Flows for repetitive tasks. Activate when users mention "windsurf flows", "task automation", "workflow automation", "repetitive tasks", or "process automation". Handles Flow creation and management. Use when working with windsurf flows automation functionality. Trigger with phrases like "windsurf flows automation", "windsurf automation", "windsurf". '

4 installs
▌
Checking License Compliance · jeremylongshore bundle
| Audit a project's dependency licenses against an explicit policy (allow-list / deny-list / review-required) and flag incompatibilities before they ship to production. Reads SPDX license identifiers from npm package manifests, Python METADATA / PKG-INFO files, and pyproject.toml; classifies each license by family (permissive, weak-copyleft, strong-copyleft, proprietary, unknown); detects copyleft contamination and SPDX-incompatible license combinations. Use when: pre-release legal review, M&A code-audit due diligence, preparing an OSS attribution NOTICE file, or switching a project's own license. Threshold: any GPL-family license in a project declaring MIT or Apache-2.0; any UNKNOWN-license package; any metadata-vs-source license mismatch. Trigger with: "check licenses", "license compliance audit", "SPDX scan", "GPL contamination check".

10 installs
▌
Detecting Directory Listing · jeremylongshore bundle
| Probe a target for directories that return auto-generated index listings instead of denying or serving a specific file — exposes the full file tree under any reachable directory, including files the application never linked to. Use when: post-deploy verification on a static-asset host, security audit before SOC2, or following up on a finding from skill #6 (exposed-files) where a backup-file path returned 200 with HTML body instead of the expected file content (suggests autoindex serving a directory listing). Threshold: any directory-shaped path returns 200 with HTML body matching the framework-specific autoindex fingerprint (nginx fancyindex, Apache mod_autoindex Index of/, Caddy browse, Lighttpd mod_dirlisting, etc.). Trigger with: "directory listing check", "autoindex detection", "open directory scan".

5 installs
▌
Detecting Weak Cryptography · jeremylongshore bundle
| Scan a source tree for weak cryptographic primitives: MD5 / SHA-1 used for security purposes, DES / 3DES / RC4 ciphers, ECB block mode, custom-built crypto (XOR loops, hand-rolled HMAC), hardcoded IVs, predictable random (Math.random / java.util.Random for crypto seeds), missing certificate verification (verify=False, rejectUnauthorized: false). Use when: pre-merge gate on crypto-touching code, audit before SOC2 / PCI assessment, post-incident review when "we found a weakness in our token signing." Threshold: any call to a known-weak algorithm with non-test context, OR cert verification explicitly disabled, OR a custom crypto loop pattern. Trigger with: "scan weak crypto", "find MD5 usage", "check ECB mode", "audit ssl verify", "weak random".

7 installs
▌
Guidewire Security And Rbac · jeremylongshore bundle
Lock down a Guidewire Cloud API integration so it survives a SOC 2 audit, an NAIC Model Audit Rule review, and a real-world incident — least-privilege role design, encrypted committed secrets via SOPS+age, PII redaction in logs (SSN/DOB/claim narrative), audit-trail capture, cross-tenant isolation for multi-carrier integrations, and detect-and-rotate response to token leaks. Use when designing the security posture for a new integration, hardening an existing one before audit, or responding to a leaked credential. Trigger with "guidewire security", "guidewire rbac", "guidewire pii redaction", "guidewire audit trail", "guidewire secret leak".

5 installs
▌
Hubspot Agency Multi Portal · jeremylongshore bundle
| Manage 10-100 HubSpot portals for agency clients with credential isolation that prevents cross-portal data contamination, per-portal audit trails for billing and GDPR/CCPA attribution, and a scriptable bulk-onboarding workflow that eliminates one-at-a-time credential setup. Use when onboarding new client portals, building a compliant per-client API call log, rotating tokens across a full agency fleet, or generating per-client compliance reports. Trigger with "hubspot agency", "multi-portal management", "hubspot credential isolation", "per-portal audit log", "hubspot compliance report", "bulk portal onboarding", "token rotation cascade", "hubspot client portals".

12 installs
▌
Oraclecloud Security Basics · jeremylongshore bundle
'Master OCI IAM policy syntax, common policy patterns, and API key management. Use when writing IAM policies, granting access to compartments, or managing API keys. Trigger with "oraclecloud security basics", "oci iam policy", "oci policy syntax", "oci api key setup". '

10 installs
▌
Oraclecloud Webhooks Events · jeremylongshore bundle
'Wire up event-driven workflows with OCI Events, Notifications, and Functions. Use when building serverless event processing, subscribing to instance lifecycle changes, or routing audit events to alerting systems. Trigger with "oraclecloud webhooks events", "oci events rules", "oci notifications", "oci ons topics". '

7 installs
▌
Supabase Auth Storage Realtime Core · jeremylongshore bundle
'Implement Supabase Auth (signUp, signIn, OAuth, session management), Storage (upload, download, signed URLs, bucket policies), and Realtime (Postgres changes, broadcast, presence). Use when building user auth flows, file upload features, or live-updating UIs with Supabase. Trigger with phrases like "supabase auth", "supabase storage upload", "supabase realtime subscribe", "supabase oauth", "supabase file upload", "supabase presence", "supabase rls storage". '

8 installs
▌
Openevidence Reference Architecture · jeremylongshore bundle
'Reference Architecture for OpenEvidence. Trigger: "openevidence reference architecture". '

5 installs
▌
Perplexity Advanced Troubleshooting · jeremylongshore
'Apply advanced debugging techniques for hard-to-diagnose Perplexity Sonar API issues. Use when standard troubleshooting fails, investigating inconsistent citations, or preparing evidence for support escalation. Trigger with phrases like "perplexity hard bug", "perplexity mystery error", "perplexity inconsistent results", "difficult perplexity issue", "perplexity deep debug". '

7 installs
▌
Salesforce Advanced Troubleshooting · jeremylongshore
'Apply Salesforce advanced debugging with debug logs, SOQL query plans, and EventLogFile analysis. Use when standard troubleshooting fails, investigating SOQL performance issues, or analyzing Apex governor limit violations. Trigger with phrases like "salesforce hard bug", "salesforce debug log", "salesforce governor limit", "salesforce query plan", "salesforce deep debug", "SOQL slow". '

7 installs
▌
Lucidchart Deploy Integration · jeremylongshore
'Deploy Integration for Lucidchart. Trigger: "lucidchart deploy integration". '

12 installs
▌
Mindtickle Deploy Integration · jeremylongshore
'Deploy Integration for MindTickle. Trigger: "mindtickle deploy integration". '

12 installs
▌
Perplexity Deploy Integration · jeremylongshore
'Deploy Perplexity Sonar API integrations to Vercel, Cloud Run, and Docker. Use when deploying Perplexity-powered applications to production, configuring platform-specific secrets, or setting up edge functions. Trigger with phrases like "deploy perplexity", "perplexity Vercel", "perplexity production deploy", "perplexity Cloud Run", "perplexity Docker". '

7 installs
▌
Salesforce Deploy Integration · jeremylongshore
'Deploy Salesforce-connected applications to Heroku, Vercel, and Cloud Run with proper credential management. Use when deploying Salesforce-powered applications to production, configuring platform-specific secrets, or setting up Heroku Connect. Trigger with phrases like "deploy salesforce app", "salesforce Heroku", "salesforce production deploy", "salesforce Cloud Run", "Heroku Connect". '

6 installs
▌
Stackblitz Deploy Integration · jeremylongshore
'Deploy WebContainer apps to Vercel, Netlify with proper COOP/COEP headers. Use when working with WebContainers or StackBlitz SDK. Trigger: "deploy stackblitz". '

10 installs
▌
Fireflies Prod Checklist · jeremylongshore
'Execute Fireflies.ai production deployment checklist with health checks and rollback. Use when deploying Fireflies.ai integrations to production, preparing for launch, or implementing go-live procedures. Trigger with phrases like "fireflies production", "deploy fireflies", "fireflies go-live", "fireflies launch checklist". '

9 installs
▌
Grammarly Prod Checklist · jeremylongshore
'Production readiness checklist for Grammarly API integrations. Use when preparing a Grammarly integration for production deployment. '

7 installs
▌
Hootsuite Prod Checklist · jeremylongshore
'Execute Hootsuite production deployment checklist and rollback procedures. Use when deploying Hootsuite integrations to production, preparing for launch, or implementing go-live procedures. Trigger with phrases like "hootsuite production", "deploy hootsuite", "hootsuite go-live", "hootsuite launch checklist". '

5 installs
▌
Instantly Prod Checklist · jeremylongshore
'Execute Instantly.ai production launch checklist and pre-flight validation. Use when deploying Instantly integrations to production, launching first campaign, or auditing production readiness. Trigger with phrases like "instantly production", "instantly launch checklist", "instantly go-live", "instantly pre-flight", "instantly prod ready". '

9 installs
▌
Intercom Core Workflow B · jeremylongshore bundle
'Manage Intercom conversations: create, reply, close, snooze, assign, and tag. Use when building conversation management features, automating replies, or implementing support workflow automation. Trigger with phrases like "intercom conversations", "intercom reply", "intercom assign conversation", "intercom close conversation", "intercom snooze", "manage intercom conversations". '

6 installs
▌
Maintainx Prod Checklist · jeremylongshore bundle
'Production deployment checklist for MaintainX integrations. Use when preparing to deploy a MaintainX integration to production, verifying production readiness, or auditing existing deployments. Trigger with phrases like "maintainx production", "deploy maintainx", "maintainx go-live", "maintainx production checklist", "maintainx launch". '

9 installs
▌
Quicknode Prod Checklist · jeremylongshore
"QuickNode prod checklist \u2014 blockchain RPC and Web3 infrastructure\ \ integration.\nUse when working with QuickNode for blockchain development.\nTrigger\ \ with phrases like \"quicknode prod checklist\", \"quicknode-prod-checklist\",\ \ \"blockchain RPC\".\n"

6 installs
▌
Remofirst Prod Checklist · jeremylongshore
"RemoFirst prod checklist \u2014 global HR, EOR, and payroll platform\ \ integration.\nUse when working with RemoFirst for global employment, payroll,\ \ or compliance.\nTrigger with phrases like \"remofirst prod checklist\", \"remofirst-prod-checklist\"\ , \"global HR API\".\n"

11 installs
▌
Salesloft Prod Checklist · jeremylongshore
'Production readiness checklist for SalesLoft API integrations. Use when deploying SalesLoft integrations to production, preparing for launch, or validating go-live requirements. Trigger: "salesloft production", "deploy salesloft", "salesloft go-live checklist". '

10 installs
▌
Techsmith Prod Checklist · jeremylongshore
'TechSmith prod checklist for Snagit COM API and Camtasia automation. Use when working with TechSmith screen capture and video editing automation. Trigger: "techsmith prod checklist". '

6 installs
▌
Twinmind Webhooks Events · jeremylongshore bundle
'Handle TwinMind meeting events including transcription completion, action item extraction, and calendar sync notifications. Use when implementing webhooks events, or managing TwinMind meeting AI operations. Trigger with phrases like "twinmind webhooks events", "twinmind webhooks events". '

10 installs
▌
Windsurf Usage Analytics · jeremylongshore bundle
'Analyze team AI usage patterns and productivity metrics. Activate when users mention "usage analytics", "ai metrics", "productivity tracking", "usage reports", or "roi analysis". Handles analytics and reporting configuration. Use when working with windsurf usage analytics functionality. Trigger with phrases like "windsurf usage analytics", "windsurf analytics", "windsurf". '

4 installs
▌
Workhuman Prod Checklist · jeremylongshore
'Workhuman prod checklist for employee recognition and rewards API. Use when integrating Workhuman Social Recognition, or building recognition workflows with HRIS systems. Trigger: "workhuman prod checklist". '

9 installs
▌
Openevidence Core Workflow A · jeremylongshore
'Execute OpenEvidence primary workflow: Clinical Query & Decision Support. Trigger: "openevidence clinical query & decision support", "primary openevidence workflow". '

8 installs
▌
Openevidence Core Workflow B · jeremylongshore
'Execute OpenEvidence secondary workflow: DeepConsult Research Synthesis. Trigger: "openevidence deepconsult research synthesis", "secondary openevidence workflow". '

9 installs
▌
Lucidchart Security Basics · jeremylongshore
'Security Basics for Lucidchart. Trigger: "lucidchart security basics". '

10 installs
▌
Mindtickle Security Basics · jeremylongshore
'Security Basics for MindTickle. Trigger: "mindtickle security basics". '

11 installs
▌
Perplexity Security Basics · jeremylongshore
'Apply Perplexity security best practices for API key management and query safety. Use when securing API keys, implementing query sanitization, or auditing Perplexity security configuration. Trigger with phrases like "perplexity security", "perplexity secrets", "secure perplexity", "perplexity API key security", "perplexity PII". '

12 installs
▌
Salesforce Multi Env Setup · jeremylongshore
'Configure Salesforce across Developer, Sandbox, and Production environments with proper org management. Use when setting up multi-environment deployments, configuring per-environment credentials, or implementing sandbox-to-production promotion flows. Trigger with phrases like "salesforce environments", "salesforce sandbox", "salesforce dev prod", "salesforce org management", "salesforce sandbox types". '

10 installs
▌
Auditing NPM Dependencies · jeremylongshore bundle
| Audit a Node.js project's installed npm dependency tree for known CVEs by wrapping the npm audit JSON output and emitting findings in the canonical penetration-tester schema. Detects direct AND transitive vulnerabilities, normalizes npm's severity scale (info/low/moderate/ high/critical) to the shared Severity enum, and parses both v1 and v2 audit output formats so the skill works against npm 6 and npm 7+ lockfiles. Use when: pre-merge gate on a Node project, post-incident sweep after a transitive package compromise (e.g. event-stream, ua-parser, node-ipc, color.js), SOC2 vendor-management evidence collection, or auditing an inherited or acquired Node codebase. Threshold: any HIGH or CRITICAL CVE in the resolved dependency tree. MODERATE / LOW reported informationally. Trigger with: "audit npm deps", "npm vulnerability scan", "check node packages for CVEs", "npm audit".

9 installs
▌
Csrf Protection Validator · jeremylongshore
'Validate csrf protection validator operations. Auto-activating skill for Security Fundamentals. Triggers on: csrf protection validator, csrf protection validator Part of the Security Fundamentals skill category. Use when working with csrf protection validator functionality. Trigger with phrases like "csrf protection validator", "csrf validator", "csrf". '

9 installs
▌
Detecting Ssl Cert Issues · jeremylongshore bundle
| Audit a target's TLS certificate beyond protocol/expiry — chain ordering, OCSP stapling, revocation status, Certificate Transparency presence, key-usage flags, and over-broad wildcards. Use when: TLS handshake already passes (skill #1 analyzing-tls-config cleared) but you suspect the cert posture is fragile. Auditors flag this during SOC2 readiness when a renewal slipped or an intermediate was rotated. Threshold: missing OCSP stapling on production, fewer than 2 SCTs in the cert, intermediate served out of order, key usage missing digitalSignature/keyEncipherment, revoked cert presented, or wildcard scope of 2-level (e.g., *.com is rejection; *.api.example.com is fine). Trigger with: "check cert revocation", "audit ocsp", "ct log check", "cert chain audit".

7 installs
▌
Firecrawl Security Basics · jeremylongshore
'Apply Firecrawl security best practices for API key management and webhook verification. Use when securing API keys, implementing webhook signature validation, or auditing Firecrawl security configuration. Trigger with phrases like "firecrawl security", "firecrawl secrets", "secure firecrawl", "firecrawl API key security", "firecrawl webhook signature". '

11 installs
▌
Fireflies Enterprise Rbac · jeremylongshore
'Configure Fireflies.ai workspace roles, channels, privacy controls, and meeting sharing. Use when managing team access, setting up channels, or configuring transcript visibility and sharing rules. Trigger with phrases like "fireflies roles", "fireflies permissions", "fireflies channels", "fireflies privacy", "fireflies sharing", "fireflies RBAC". '

10 installs
▌
Fireflies Multi Env Setup · jeremylongshore
'Configure Fireflies.ai across dev, staging, and production with isolated API keys. Use when setting up multi-environment deployments, managing per-env secrets, or implementing environment-specific Fireflies configurations. Trigger with phrases like "fireflies environments", "fireflies staging", "fireflies dev prod", "fireflies environment setup", "fireflies config by env". '

8 installs
▌
Fireflies Security Basics · jeremylongshore
'Apply Fireflies.ai security best practices for API keys and webhook verification. Use when securing API keys, verifying webhook signatures, or auditing Fireflies.ai security configuration. Trigger with phrases like "fireflies security", "fireflies secrets", "secure fireflies", "fireflies webhook signature", "fireflies HMAC". '

6 installs
▌
Grammarly Security Basics · jeremylongshore
'Security fundamentals for Grammarly API credential management. Use when setting up secure authentication and token handling for Grammarly integrations. '

8 installs
▌
Guidewire Core Workflow B · jeremylongshore bundle
Automate the ClaimCenter FNOL→investigation→reserve→payment→settlement→close pipeline including the failure paths — duplicate FNOL from multi-source intake, reserve-must-precede-payment ordering, supervisor-authorization tiers, premature settlement, and reopen-vs-new-claim ambiguity. Use when building claim intake from caller portals, IVR, or partner systems; automating reserve-setting jobs; or integrating settlement events with finance. Trigger with "claimcenter automation", "FNOL", "claim reserve", "claim payment", "claim settlement", "claim reopen".

8 installs
▌
Hootsuite Security Basics · jeremylongshore
'Apply Hootsuite security best practices for secrets and access control. Use when securing API keys, implementing least privilege access, or auditing Hootsuite security configuration. Trigger with phrases like "hootsuite security", "hootsuite secrets", "secure hootsuite", "hootsuite API key security". '

10 installs
▌
Instantly Security Basics · jeremylongshore
'Apply Instantly.ai security best practices for API keys, scopes, and access control. Use when securing API keys, implementing least-privilege access, or auditing Instantly workspace permissions. Trigger with phrases like "instantly security", "instantly api key safety", "instantly least privilege", "secure instantly", "instantly access control". '

9 installs
▌
Klingai Compliance Review · jeremylongshore bundle
'Security and compliance review framework for Kling AI integrations. Use when preparing for audits or reviewing security posture. Trigger with phrases like ''klingai compliance'', ''kling ai security review'', ''klingai audit prep'', ''video generation compliance''. '

11 installs
▌
Langchain Enterprise Rbac · jeremylongshore bundle
"Enforce tenant isolation and role-based access across LangChain 1.0\ \ chains and\nLangGraph 1.0 agents \u2014 per-request retriever construction, tenant-scoped\ \ rate\nlimits, role-scoped tool allowlists, and structured audit logs. Use when\n\ building multi-tenant saas, passing soc2 review, or debugging cross-tenant\nleak.\ \ Trigger with \"langchain multi-tenant\", \"langchain tenant isolation\",\n\"langchain\ \ rbac\", \"langchain row-level security\", \"langchain audit log\".\n"

6 installs
▌
Langchain Security Basics · jeremylongshore bundle
"Harden a LangChain 1.0 chain or LangGraph agent against prompt injection,\ \ tool\nabuse, PII leakage in traces, and secrets exfiltration \u2014 wrap user\ \ content in\nXML tags, enforce the tool allowlist via provider-native tool calling,\ \ redact\nPII in middleware upstream of cache and tracing, validate outputs with\ \ Pydantic,\nand lock down secrets behind a secret manager. Use when prepping for\ \ a security\nreview, responding to an incident, building a multi-tenant SaaS, or\ \ writing a\nthreat model.\nTrigger with \"langchain security\", \"prompt injection\ \ defense\",\n\"langchain tool allowlist\", \"langchain PII redaction\",\n\"langchain\ \ secrets management\".\n"

5 installs
▌
Maintainx Security Basics · jeremylongshore bundle
'Configure MaintainX API security, credential management, and access control. Use when securing API keys, implementing access controls, or hardening your MaintainX integration. Trigger with phrases like "maintainx security", "maintainx api key security", "secure maintainx", "maintainx credentials", "maintainx access control". '

10 installs
▌
Openevidence Install Auth · jeremylongshore
'Install and configure OpenEvidence SDK/API authentication. Use when setting up a new OpenEvidence integration. Trigger: "install openevidence", "setup openevidence", "openevidence auth". '

12 installs
▌
Quicknode Security Basics · jeremylongshore
"QuickNode security basics \u2014 blockchain RPC and Web3 infrastructure\ \ integration.\nUse when working with QuickNode for blockchain development.\nTrigger\ \ with phrases like \"quicknode security basics\", \"quicknode-security-basics\"\ , \"blockchain RPC\".\n"

7 installs
▌
Remofirst Core Workflow A · jeremylongshore
"RemoFirst core workflow a \u2014 global HR, EOR, and payroll platform\ \ integration.\nUse when working with RemoFirst for global employment, payroll,\ \ or compliance.\nTrigger with phrases like \"remofirst core workflow a\", \"remofirst-core-workflow-a\"\ , \"global HR API\".\n"

5 installs
▌
Remofirst Core Workflow B · jeremylongshore
"RemoFirst core workflow b \u2014 global HR, EOR, and payroll platform\ \ integration.\nUse when working with RemoFirst for global employment, payroll,\ \ or compliance.\nTrigger with phrases like \"remofirst core workflow b\", \"remofirst-core-workflow-b\"\ , \"global HR API\".\n"

8 installs
▌
Remofirst Security Basics · jeremylongshore
"RemoFirst security basics \u2014 global HR, EOR, and payroll platform\ \ integration.\nUse when working with RemoFirst for global employment, payroll,\ \ or compliance.\nTrigger with phrases like \"remofirst security basics\", \"remofirst-security-basics\"\ , \"global HR API\".\n"

6 installs
▌
Salesloft Security Basics · jeremylongshore
'Secure SalesLoft OAuth tokens, API keys, and webhook signatures. Use when implementing token rotation, securing webhook endpoints, or auditing SalesLoft API access controls. Trigger: "salesloft security", "salesloft secrets", "secure salesloft", "salesloft token rotation". '

5 installs
▌
Snowflake Security Basics · jeremylongshore
'Apply Snowflake security best practices: network policies, key rotation, MFA, encryption, and least-privilege access. Use when securing Snowflake access, implementing network policies, or auditing security configuration. Trigger with phrases like "snowflake security", "snowflake network policy", "secure snowflake", "snowflake MFA", "snowflake encryption". '

10 installs
▌
Techsmith Security Basics · jeremylongshore
'TechSmith security basics for Snagit COM API and Camtasia automation. Use when working with TechSmith screen capture and video editing automation. Trigger: "techsmith security basics". '

8 installs
▌
Workhuman Security Basics · jeremylongshore
'Workhuman security basics for employee recognition and rewards API. Use when integrating Workhuman Social Recognition, or building recognition workflows with HRIS systems. Trigger: "workhuman security basics". '

7 installs
▌
Xss Vulnerability Scanner · jeremylongshore
'Scan xss vulnerability scanner operations. Auto-activating skill for Security Fundamentals. Triggers on: xss vulnerability scanner, xss vulnerability scanner Part of the Security Fundamentals skill category. Use when working with xss vulnerability scanner functionality. Trigger with phrases like "xss vulnerability scanner", "xss scanner", "xss". '

6 installs
▌
Supabase Advanced Troubleshooting · jeremylongshore bundle
| Deep Supabase diagnostics: pg_stat_statements for slow queries, lock debugging with pg_locks, connection leak detection, RLS policy conflicts, Edge Function cold starts, and Realtime connection drop analysis. Use when standard troubleshooting fails, when investigating performance regressions, when debugging race conditions, or when building evidence for a Supabase support escalation. Trigger with "supabase deep debug", "supabase slow query", "supabase lock contention", "supabase connection leak", "supabase RLS conflict", "supabase cold start".

10 installs
▌
Supabase Schema From Requirements · jeremylongshore bundle
'Design Supabase Postgres schema from business requirements with migrations, RLS, and types. Use when translating specifications into database tables, creating migration files, adding Row Level Security policies, or generating TypeScript types from schema. Trigger with phrases like "supabase schema", "design database supabase", "schema from requirements", "supabase migration", "supabase tables from spec". '

9 installs
▌
Langchain Langgraph Checkpointing · jeremylongshore bundle
"Persist LangGraph agent state correctly with MemorySaver and PostgresSaver\ \ \u2014\nthread_id discipline, JSON-serializable state rules, time-travel, schema\n\ migration. Use when adding chat memory, migrating from ConversationBufferMemory,\n\ or time-traveling an agent state to debug an incident.\nTrigger with \"langgraph\ \ checkpointer\", \"MemorySaver\", \"PostgresSaver\",\n\"thread_id\", \"langgraph\ \ time travel\", \"langgraph state persistence\".\n"

7 installs
▌
Lucidchart Reference Architecture · jeremylongshore
'Reference Architecture for Lucidchart. Trigger: "lucidchart reference architecture". '

11 installs
▌
Mindtickle Reference Architecture · jeremylongshore
'Reference Architecture for MindTickle. Trigger: "mindtickle reference architecture". '

10 installs
▌
Openrouter Reference Architecture · jeremylongshore bundle
'Design production architectures using OpenRouter as the LLM gateway. Use when planning system design, reviewing architecture, or scaling AI applications. Triggers: ''openrouter architecture'', ''openrouter system design'', ''openrouter at scale'', ''llm gateway architecture''. '

10 installs
▌
Perplexity Reference Architecture · jeremylongshore bundle
'Implement Perplexity reference architecture with model routing, citation pipeline, and research automation. Use when designing new Perplexity integrations, reviewing project structure, or establishing architecture for search-augmented apps. Trigger with phrases like "perplexity architecture", "perplexity project structure", "how to organize perplexity", "perplexity design patterns". '

6 installs
▌
Salesforce Reference Architecture · jeremylongshore
'Implement Salesforce integration reference architecture with jsforce, SFDX, and event-driven patterns. Use when designing new Salesforce integrations, reviewing project structure, or establishing architecture standards for Salesforce-connected applications. Trigger with phrases like "salesforce architecture", "salesforce project structure", "salesforce integration design", "how to organize salesforce code", "salesforce layout". '

11 installs
▌
Stackblitz Reference Architecture · jeremylongshore
'Production architecture for WebContainer-powered browser IDEs and playgrounds. Use when working with WebContainers or StackBlitz SDK. Trigger: "stackblitz architecture". '

15 installs
▌
Figma Advanced Troubleshooting · jeremylongshore bundle
'Deep debugging for Figma API issues: network analysis, response inspection, and support escalation. Use when standard troubleshooting fails, diagnosing intermittent failures, or preparing detailed evidence for Figma support. Trigger with phrases like "figma hard bug", "figma mystery error", "figma deep debug", "figma intermittent failure", "figma support ticket". '

7 installs
▌
Ideogram Security Basics · jeremylongshore
'Apply Ideogram security best practices for API key management and access control. Use when securing API keys, implementing key rotation, or auditing Ideogram security configuration. Trigger with phrases like "ideogram security", "ideogram secrets", "secure ideogram", "ideogram API key security", "ideogram key rotation". '

5 installs
▌
Intercom Security Basics · jeremylongshore bundle
'Apply Intercom security best practices for tokens, webhook verification, and scopes. Use when securing access tokens, implementing webhook signature validation, or configuring least-privilege OAuth scopes. Trigger with phrases like "intercom security", "intercom secrets", "secure intercom", "intercom webhook signature", "intercom token rotation". '

10 installs
▌
Juicebox Security Basics · jeremylongshore
'Apply Juicebox security best practices. Trigger: "juicebox security", "juicebox api key security". '

11 installs
▌
Langfuse Security Basics · jeremylongshore
'Implement Langfuse security best practices for API keys and data privacy. Use when securing Langfuse integration, protecting API keys, or implementing data privacy controls for LLM observability. Trigger with phrases like "langfuse security", "langfuse API key security", "langfuse data privacy", "secure langfuse", "langfuse PII". '

10 installs
▌
Linktree Security Basics · jeremylongshore
'Security Basics for Linktree. Trigger: "linktree security basics". '

6 installs
▌
Lokalise Multi Env Setup · jeremylongshore bundle
'Configure Lokalise across development, staging, and production environments. Use when setting up multi-environment deployments, configuring per-environment secrets, or implementing environment-specific Lokalise configurations. Trigger with phrases like "lokalise environments", "lokalise staging", "lokalise dev prod", "lokalise environment setup", "lokalise config by env". '

6 installs
▌
Lokalise Security Basics · jeremylongshore
'Apply Lokalise security best practices for API tokens and access control. Use when securing API tokens, implementing least privilege access, or auditing Lokalise security configuration. Trigger with phrases like "lokalise security", "lokalise secrets", "secure lokalise", "lokalise API token security". '

10 installs
▌
Obsidian Security Basics · jeremylongshore
'Implement secure Obsidian plugin development practices. Covers credential storage, input validation, XSS prevention, network security, URI handler safety, and Electron security. Use when handling user data, storing API keys, making network requests, or preparing for community plugin submission. Trigger with phrases like "obsidian security", "secure obsidian plugin", "obsidian data protection", "obsidian privacy", "obsidian api key storage". '

7 installs
▌
Oraclecloud Install Auth · jeremylongshore bundle
'Install and configure Oracle Cloud Infrastructure (OCI) SDK and CLI authentication. Use when setting up a new OCI integration, generating API signing keys, or debugging config file errors. Trigger with "install oraclecloud", "setup oci auth", "oraclecloud credentials", "oci config". '

10 installs
▌
Palantir Multi Env Setup · jeremylongshore
'Configure Palantir Foundry across development, staging, and production environments. Use when setting up multi-environment Foundry deployments, managing per-environment credentials, or implementing environment-specific configurations. Trigger with phrases like "palantir environments", "foundry staging", "foundry dev prod", "palantir environment setup". '

4 installs
▌
Palantir Security Basics · jeremylongshore
'Apply Palantir Foundry security best practices for credentials, scopes, and access control. Use when securing API tokens, implementing least privilege access, or auditing Foundry security configuration. Trigger with phrases like "palantir security", "foundry secrets", "secure palantir", "palantir API key security", "foundry scopes". '

9 installs
▌
Remofirst Local Dev Loop · jeremylongshore
"RemoFirst local dev loop \u2014 global HR, EOR, and payroll platform\ \ integration.\nUse when working with RemoFirst for global employment, payroll,\ \ or compliance.\nTrigger with phrases like \"remofirst local dev loop\", \"remofirst-local-dev-loop\"\ , \"global HR API\".\n"

9 installs
▌
Replit Policy Guardrails · jeremylongshore
'Enforce security and resource policies for Replit-hosted apps: secrets exposure prevention, resource limits, deployment visibility, and database access controls. Use when hardening a Replit app for production, auditing security posture, or setting up guardrails for team development. Trigger with phrases like "replit policy", "replit guardrails", "replit security audit", "replit hardening", "replit best practices check". '

6 installs
▌
Retellai Security Basics · jeremylongshore bundle
"Retell AI security basics \u2014 AI voice agent and phone call automation.\n\ Use when working with Retell AI for voice agents, phone calls, or telephony.\nTrigger\ \ with phrases like \"retell security basics\", \"retellai-security-basics\", \"\ voice agent\".\n"

11 installs
▌
Salesforce Data Handling · jeremylongshore
'Implement Salesforce data privacy, GDPR/CCPA compliance, and field-level encryption patterns. Use when handling PII in Salesforce records, implementing data subject access requests, or configuring Salesforce Shield encryption. Trigger with phrases like "salesforce data privacy", "salesforce PII", "salesforce GDPR", "salesforce data retention", "salesforce encryption", "salesforce CCPA". '

9 installs
▌
Sentry Policy Guardrails · jeremylongshore bundle
'Enforce organizational governance and policy guardrails for Sentry usage. Use when standardizing Sentry configuration across services, enforcing PII scrubbing, building shared config packages, or auditing drift. Trigger with phrases like "sentry governance", "sentry policy", "sentry standards", "enforce sentry config", "sentry compliance". '

10 installs
▌
Session Security Checker · jeremylongshore
'Validate session security checker operations. Auto-activating skill for Security Fundamentals. Triggers on: session security checker, session security checker Part of the Security Fundamentals skill category. Use when working with session security checker functionality. Trigger with phrases like "session security checker", "session checker", "session". '

12 installs
▌
Supabase Security Basics · jeremylongshore bundle
'Apply Supabase security best practices: anon vs service_role key separation, RLS enforcement, policy patterns, JWT verification, and API hardening. Use when securing a Supabase project, auditing API key usage, implementing Row Level Security, or running a production security checklist. Trigger with phrases like "supabase security", "supabase RLS", "secure supabase", "supabase API key", "supabase hardening", "row level security", "service role key". '

8 installs
▌
Together Security Basics · jeremylongshore
'Together AI security basics for inference, fine-tuning, and model deployment. Use when working with Together AI''s OpenAI-compatible API. Trigger: "together security basics". '

10 installs
▌
Twinmind Security Basics · jeremylongshore bundle
'Security best practices for TwinMind: on-device audio processing, encrypted cloud backups, microphone permissions, and data privacy controls. Use when implementing security basics, or managing TwinMind meeting AI operations. Trigger with phrases like "twinmind security basics", "twinmind security basics". '

7 installs
▌
Openrouter Function Calling · jeremylongshore bundle
'Implement function/tool calling with OpenRouter models. Use when building agents, structured output, or tool-augmented LLM workflows. Triggers: ''openrouter function calling'', ''openrouter tools'', ''openrouter agent tools'', ''tool use openrouter''. '

9 installs
▌
Detecting SQL Injection Patterns · jeremylongshore bundle
| Scan a source tree for SQL-injection vulnerable patterns: string concatenation into queries, f-string interpolation in SQL, string-format substitution into raw queries, deprecated cursor methods (cursor.execute with % formatting), Knex / Sequelize raw() with template interpolation, sequelize.query with replacements. Use when: pre-commit code review, post-feature SQL-touching release, inheriting a legacy codebase that predates ORMs, or post-bug-report investigation. Threshold: any source line where SQL keywords (SELECT / INSERT / UPDATE / DELETE / FROM / WHERE) appear in a string that's being built via concatenation, f-string, %-format, or .format() with variable input. Trigger with: "scan for sqli", "sql injection patterns", "check raw queries", "audit cursor.execute".

6 installs
▌
Shopify Advanced Troubleshooting · jeremylongshore bundle
'Debug complex Shopify API issues using cost analysis, request tracing, webhook delivery inspection, and GraphQL introspection. Use when encountering intermittent failures, throttling mysteries, or webhook delivery gaps. Trigger with phrases like "shopify hard bug", "shopify mystery error", "shopify deep debug", "difficult shopify issue", "shopify intermittent failure". '

5 installs
▌
Generating Executive Summary · jeremylongshore bundle
| Compose an exec-readable summary from a unified findings JSONL plus the OWASP coverage report. Computes a single engagement risk score (0-100, severity-weighted with OWASP-breadth and governance terms), rolls up findings into headline counts, names the top-3 remediation priorities with effort + impact estimates, and produces a 1-2 page markdown document for a C-level or board audience. Elides technical detail; the vulnerability report is the deep document. Use when: closing an engagement, preparing the exec-readout meeting, packaging for board review, or producing a one-page narrative for auditor / insurer / board. Threshold: input findings missing produces CRITICAL operational finding; otherwise the deliverable is the document itself. Trigger with: "generate exec summary", "executive summary", "C-level readout", "board pentest summary".

10 installs
▌
Hubspot Deal Pipeline Automation · jeremylongshore bundle
| Automate and audit HubSpot deal pipeline operations without destroying real pipeline — covering stage automation loops, stale-deal safe-close logic, forecast reconciliation, custom property drift detection, quota dashboard cache-busting, and multi-pipeline duplicate detection. Use when writing or debugging workflow automations that move deals between stages, auditing pipelines for stale or duplicated opportunities, reconciling forecast numbers that disagree across reports, or hardening RevOps dashboards against property deletions and reporting-cache lag. Trigger with "hubspot deal pipeline", "hubspot stage automation", "hubspot stale deals", "hubspot forecast reconciliation", "hubspot quota dashboard", "hubspot duplicate deals", "revops pipeline audit".

10 installs
▌
Firecrawl Reference Architecture · jeremylongshore
'Implement Firecrawl reference architecture with scrape/crawl/map/extract pipelines. Use when designing new Firecrawl integrations, reviewing project structure, or building content ingestion pipelines for AI/RAG applications. Trigger with phrases like "firecrawl architecture", "firecrawl project structure", "firecrawl pipeline", "firecrawl RAG", "firecrawl knowledge base". '

9 installs
▌
Fireflies Reference Architecture · jeremylongshore
'Design meeting intelligence architecture with Fireflies.ai GraphQL API, webhooks, and CRM sync. Use when designing new integrations, planning transcript pipelines, or establishing architecture for meeting analytics platforms. Trigger with phrases like "fireflies architecture", "fireflies design", "fireflies project structure", "meeting intelligence pipeline". '

10 installs

3,892 published skills · page 4 of 39