[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6F79R32YV2M2J6PSQBPR7EC":3,"skill-same:01M6F79R32YV2M2J6PSQBPR7EC":75},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":18,"publishedAt":43,"linkOnly":44,"markdownContent":45,"markdownBody":46,"frontMatter":47,"refName":52,"commitSha":53,"skillDirectory":54,"forksCount":55,"repositoryHtmlUrl":56,"repositoryHomepageUrl":6,"ownerHtmlUrl":57,"ownerBlogUrl":58,"ownerDescription":59,"updatedAt":60,"install":61,"resources":74},"01M6F79R32YV2M2J6PSQBPR7EC","ideogram-security-basics",null,"Apply Ideogram security best practices for secrets and access control.\nUse when securing API keys, implementing least privilege access,\nor auditing Ideogram security configuration.\nTrigger with phrases like \"ideogram security\", \"ideogram secrets\",\n\"secure ideogram\", \"ideogram API key security\".","Dicklesworthstone\u002Fpi_agent_rust","Dicklesworthstone","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F35050222?v=4","01M6CG26AR942CSVMN1M5E3DSE","Jeff Emanuel","01M6CG26EPP71PSHW1VDS71121",1979,"MIT","https:\u002F\u002Fgithub.com\u002FDicklesworthstone\u002Fpi_agent_rust\u002Fblob\u002Fmain\u002Ftests\u002Fext_conformance\u002Fartifacts\u002Fplugins-community\u002Fplugins\u002Fsaas-packs\u002Fideogram-pack\u002Fskills\u002Fideogram-security-basics\u002FSKILL.md",[],[19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42],"ideogram security basics","basics","security","configuration","least privilege","when","api keys","for","implementing","with","trigger","io","control","Access Control","use","write","read","grep","access","secrets","api","security best practices","best practices","secure","2026-11-10 10:12:30",false,"---\nname: ideogram-security-basics\ndescription: |\n  Apply Ideogram security best practices for secrets and access control.\n  Use when securing API keys, implementing least privilege access,\n  or auditing Ideogram security configuration.\n  Trigger with phrases like \"ideogram security\", \"ideogram secrets\",\n  \"secure ideogram\", \"ideogram API key security\".\nallowed-tools: Read, Write, Grep\nversion: 1.0.0\nlicense: MIT\nauthor: Jeremy Longshore \u003Cjeremy@intentsolutions.io>\n---\n\n# Ideogram Security Basics\n\n## Overview\nSecurity best practices for Ideogram API keys, tokens, and access control.\n\n## Prerequisites\n- Ideogram SDK installed\n- Understanding of environment variables\n- Access to Ideogram dashboard\n\n## Instructions\n\n### Step 1: Configure Environment Variables\n```bash\n# .env (NEVER commit to git)\nIDEOGRAM_API_KEY=sk_live_***\nIDEOGRAM_SECRET=***\n\n# .gitignore\n.env\n.env.local\n.env.*.local\n```\n\n### Step 2: Implement Secret Rotation\n```bash\n# 1. Generate new key in Ideogram dashboard\n# 2. Update environment variable\nexport IDEOGRAM_API_KEY=\"new_key_here\"\n\n# 3. Verify new key works\ncurl -H \"Authorization: Bearer ${IDEOGRAM_API_KEY}\" \\\n  https:\u002F\u002Fapi.ideogram.com\u002Fhealth\n\n# 4. Revoke old key in dashboard\n```\n\n### Step 3: Apply Least Privilege\n| Environment | Recommended Scopes |\n|-------------|-------------------|\n| Development | `read:*` |\n| Staging | `read:*, write:limited` |\n| Production | `Only required scopes` |\n\n## Output\n- Secure API key storage\n- Environment-specific access controls\n- Audit logging enabled\n\n## Error Handling\n| Security Issue | Detection | Mitigation |\n|----------------|-----------|------------|\n| Exposed API key | Git scanning | Rotate immediately |\n| Excessive scopes | Audit logs | Reduce permissions |\n| Missing rotation | Key age check | Schedule rotation |\n\n## Examples\n\n### Service Account Pattern\n```typescript\nconst clients = {\n  reader: new IdeogramClient({\n    apiKey: process.env.IDEOGRAM_READ_KEY,\n  }),\n  writer: new IdeogramClient({\n    apiKey: process.env.IDEOGRAM_WRITE_KEY,\n  }),\n};\n```\n\n### Webhook Signature Verification\n```typescript\nimport crypto from 'crypto';\n\nfunction verifyWebhookSignature(\n  payload: string, signature: string, secret: string\n): boolean {\n  const expected = crypto.createHmac('sha256', secret).update(payload).digest('hex');\n  return crypto.timingSafeEqual(Buffer.from(signature), Buffer.from(expected));\n}\n```\n\n### Security Checklist\n- [ ] API keys in environment variables\n- [ ] `.env` files in `.gitignore`\n- [ ] Different keys for dev\u002Fstaging\u002Fprod\n- [ ] Minimal scopes per environment\n- [ ] Webhook signatures validated\n- [ ] Audit logging enabled\n\n### Audit Logging\n```typescript\ninterface AuditEntry {\n  timestamp: Date;\n  action: string;\n  userId: string;\n  resource: string;\n  result: 'success' | 'failure';\n  metadata?: Record\u003Cstring, any>;\n}\n\nasync function auditLog(entry: Omit\u003CAuditEntry, 'timestamp'>): Promise\u003Cvoid> {\n  const log: AuditEntry = { ...entry, timestamp: new Date() };\n\n  \u002F\u002F Log to Ideogram analytics\n  await ideogramClient.track('audit', log);\n\n  \u002F\u002F Also log locally for compliance\n  console.log('[AUDIT]', JSON.stringify(log));\n}\n\n\u002F\u002F Usage\nawait auditLog({\n  action: 'ideogram.api.call',\n  userId: currentUser.id,\n  resource: '\u002Fv1\u002Fresource',\n  result: 'success',\n});\n```\n\n## Resources\n- [Ideogram Security Guide](https:\u002F\u002Fdocs.ideogram.com\u002Fsecurity)\n- [Ideogram API Scopes](https:\u002F\u002Fdocs.ideogram.com\u002Fscopes)\n\n## Next Steps\nFor production deployment, see `ideogram-prod-checklist`.","# Ideogram Security Basics\n\n## Overview\nSecurity best practices for Ideogram API keys, tokens, and access control.\n\n## Prerequisites\n- Ideogram SDK installed\n- Understanding of environment variables\n- Access to Ideogram dashboard\n\n## Instructions\n\n### Step 1: Configure Environment Variables\n```bash\n# .env (NEVER commit to git)\nIDEOGRAM_API_KEY=sk_live_***\nIDEOGRAM_SECRET=***\n\n# .gitignore\n.env\n.env.local\n.env.*.local\n```\n\n### Step 2: Implement Secret Rotation\n```bash\n# 1. Generate new key in Ideogram dashboard\n# 2. Update environment variable\nexport IDEOGRAM_API_KEY=\"new_key_here\"\n\n# 3. Verify new key works\ncurl -H \"Authorization: Bearer ${IDEOGRAM_API_KEY}\" \\\n  https:\u002F\u002Fapi.ideogram.com\u002Fhealth\n\n# 4. Revoke old key in dashboard\n```\n\n### Step 3: Apply Least Privilege\n| Environment | Recommended Scopes |\n|-------------|-------------------|\n| Development | `read:*` |\n| Staging | `read:*, write:limited` |\n| Production | `Only required scopes` |\n\n## Output\n- Secure API key storage\n- Environment-specific access controls\n- Audit logging enabled\n\n## Error Handling\n| Security Issue | Detection | Mitigation |\n|----------------|-----------|------------|\n| Exposed API key | Git scanning | Rotate immediately |\n| Excessive scopes | Audit logs | Reduce permissions |\n| Missing rotation | Key age check | Schedule rotation |\n\n## Examples\n\n### Service Account Pattern\n```typescript\nconst clients = {\n  reader: new IdeogramClient({\n    apiKey: process.env.IDEOGRAM_READ_KEY,\n  }),\n  writer: new IdeogramClient({\n    apiKey: process.env.IDEOGRAM_WRITE_KEY,\n  }),\n};\n```\n\n### Webhook Signature Verification\n```typescript\nimport crypto from 'crypto';\n\nfunction verifyWebhookSignature(\n  payload: string, signature: string, secret: string\n): boolean {\n  const expected = crypto.createHmac('sha256', secret).update(payload).digest('hex');\n  return crypto.timingSafeEqual(Buffer.from(signature), Buffer.from(expected));\n}\n```\n\n### Security Checklist\n- [ ] API keys in environment variables\n- [ ] `.env` files in `.gitignore`\n- [ ] Different keys for dev\u002Fstaging\u002Fprod\n- [ ] Minimal scopes per environment\n- [ ] Webhook signatures validated\n- [ ] Audit logging enabled\n\n### Audit Logging\n```typescript\ninterface AuditEntry {\n  timestamp: Date;\n  action: string;\n  userId: string;\n  resource: string;\n  result: 'success' | 'failure';\n  metadata?: Record\u003Cstring, any>;\n}\n\nasync function auditLog(entry: Omit\u003CAuditEntry, 'timestamp'>): Promise\u003Cvoid> {\n  const log: AuditEntry = { ...entry, timestamp: new Date() };\n\n  \u002F\u002F Log to Ideogram analytics\n  await ideogramClient.track('audit', log);\n\n  \u002F\u002F Also log locally for compliance\n  console.log('[AUDIT]', JSON.stringify(log));\n}\n\n\u002F\u002F Usage\nawait auditLog({\n  action: 'ideogram.api.call',\n  userId: currentUser.id,\n  resource: '\u002Fv1\u002Fresource',\n  result: 'success',\n});\n```\n\n## Resources\n- [Ideogram Security Guide](https:\u002F\u002Fdocs.ideogram.com\u002Fsecurity)\n- [Ideogram API Scopes](https:\u002F\u002Fdocs.ideogram.com\u002Fscopes)\n\n## Next Steps\nFor production deployment, see `ideogram-prod-checklist`.",{"name":5,"author":48,"license":15,"version":49,"description":50,"allowed-tools":51},"Jeremy Longshore \u003Cjeremy@intentsolutions.io>","1.0.0","Apply Ideogram security best practices for secrets and access control.\nUse when securing API keys, implementing least privilege access,\nor auditing Ideogram security configuration.\nTrigger with phrases like \"ideogram security\", \"ideogram secrets\",\n\"secure ideogram\", \"ideogram API key security\".\n","Read, Write, Grep","main","90b50ed0778745a80fd5bfb13b1843d45b9e82f7","tests\u002Fext_conformance\u002Fartifacts\u002Fplugins-community\u002Fplugins\u002Fsaas-packs\u002Fideogram-pack\u002Fskills\u002Fideogram-security-basics",231,"https:\u002F\u002Fgithub.com\u002FDicklesworthstone\u002Fpi_agent_rust","https:\u002F\u002Fgithub.com\u002FDicklesworthstone","https:\u002F\u002Fwww.jeffreyemanuel.com\u002F","Building in NY","2026-11-11 01:23:40",{"source":8,"skillName":5,"commands":62,"prompt":72,"zipAvailable":73},[63,66,69],{"tool":64,"command":65},"npx","npx skills add Dicklesworthstone\u002Fpi_agent_rust --skill ideogram-security-basics",{"tool":67,"command":68},"bunx","bunx skills add Dicklesworthstone\u002Fpi_agent_rust --skill ideogram-security-basics",{"tool":70,"command":71},"pnpm","pnpm dlx skills add Dicklesworthstone\u002Fpi_agent_rust --skill ideogram-security-basics","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002FDicklesworthstone\u002Fpi_agent_rust\u002Fblob\u002Fmain\u002Ftests\u002Fext_conformance\u002Fartifacts\u002Fplugins-community\u002Fplugins\u002Fsaas-packs\u002Fideogram-pack\u002Fskills\u002Fideogram-security-basics\u002FSKILL.md",true,[],[76,115,139,165,192,214],{"skillNo":77,"name":78,"nameZh":6,"description":79,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":80,"licenseFileUrl":81,"sourceHtmlUrl":82,"categories":83,"keywords":89,"publishedAt":43},"01M6FEGPPK0ZTKCCM0R3E3KS33","web-artifacts-builder","Suite of tools for creating elaborate, multi-component claude.ai HTML artifacts using modern frontend web technologies (React, Tailwind CSS, shadcn\u002Fui). Use for complex artifacts requiring state management, routing, or shadcn\u002Fui components - not for simple single-file HTML\u002FJSX artifacts.","Apache-2.0","https:\u002F\u002Fgithub.com\u002FDicklesworthstone\u002Fpi_agent_rust\u002Fblob\u002Fmain\u002Ftests\u002Fext_conformance\u002Fartifacts\u002Ftemplates-davila7\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Futilities\u002Fweb-artifacts-builder\u002FLICENSE.txt","https:\u002F\u002Fgithub.com\u002FDicklesworthstone\u002Fpi_agent_rust\u002Fblob\u002Fmain\u002Ftests\u002Fext_conformance\u002Fartifacts\u002Ftemplates-davila7\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Futilities\u002Fweb-artifacts-builder\u002FSKILL.md",[84],{"categoryNo":85,"categoryName":86,"taxonomyType":87,"taxonomyTypeDesc":88},"01JBSEEDCAT000000000000009","前端开发","SCENARIO","使用场景",[90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,33,108,109,110,111,112,26,113,114],"web artifacts builder","web","artifacts","artifacts builder","builder","frontend","css","components","react","component","routing","state management","state","shadcn","file","ui","Tools","Tailwind","html","single-file","simple","ui components","multi","jsx","suite",{"skillNo":116,"name":117,"nameZh":6,"description":118,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":80,"licenseFileUrl":119,"sourceHtmlUrl":120,"categories":121,"keywords":126,"publishedAt":43},"01M6FEE9VTK1W4GY21AKREJXRG","webapp-testing","Toolkit for interacting with and testing local web applications using Playwright. Supports verifying frontend functionality, debugging UI behavior, capturing browser screenshots, and viewing browser logs.","https:\u002F\u002Fgithub.com\u002FDicklesworthstone\u002Fpi_agent_rust\u002Fblob\u002Fmain\u002Ftests\u002Fext_conformance\u002Fartifacts\u002Ftemplates-davila7\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fsecurity\u002Fwebapp-testing\u002FLICENSE.txt","https:\u002F\u002Fgithub.com\u002FDicklesworthstone\u002Fpi_agent_rust\u002Fblob\u002Fmain\u002Ftests\u002Fext_conformance\u002Fartifacts\u002Ftemplates-davila7\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fsecurity\u002Fwebapp-testing\u002FSKILL.md",[122,125],{"categoryNo":123,"categoryName":124,"taxonomyType":87,"taxonomyTypeDesc":88},"01JBSEEDCAT000000000000008","测试与质量",{"categoryNo":85,"categoryName":86,"taxonomyType":87,"taxonomyTypeDesc":88},[127,128,129,95,130,131,91,132,133,134,105,135,136,137,138,28,26],"testing","webapp testing","webapp","screenshots","playwright","debugging","toolkit","browser","logs","applications","behavior","local",{"skillNo":140,"name":141,"nameZh":6,"description":142,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":143,"sourceHtmlUrl":144,"categories":145,"keywords":146,"publishedAt":43},"01M6FE20F7ZTQBFWKF4MPJ2SBX","neuropixels-analysis","Neuropixels neural recording analysis. Load SpikeGLX\u002FOpenEphys data, preprocess, motion correction, Kilosort4 spike sorting, quality metrics, Allen\u002FIBL curation, AI-assisted visual analysis, for Neuropixels 1.0\u002F2.0 extracellular electrophysiology. Use when working with neural recordings, spike sorting, extracellular electrophysiology, or when the user mentions Neuropixels, SpikeGLX, Open Ephys, Kilosort, quality metrics, or unit curation.","https:\u002F\u002Fgithub.com\u002FDicklesworthstone\u002Fpi_agent_rust\u002Fblob\u002Fmain\u002Ftests\u002Fext_conformance\u002Fartifacts\u002Ftemplates-davila7\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fscientific\u002Fneuropixels-analysis\u002FLICENSE.txt","https:\u002F\u002Fgithub.com\u002FDicklesworthstone\u002Fpi_agent_rust\u002Fblob\u002Fmain\u002Ftests\u002Fext_conformance\u002Fartifacts\u002Ftemplates-davila7\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fscientific\u002Fneuropixels-analysis\u002FSKILL.md",[],[147,148,149,150,151,152,153,154,33,155,156,157,158,159,160,161,28,162,163,164,26,24],"analysis","neuropixels analysis","spike","metrics","data","open","quality","user","recordings","Neural","motion","visual","quality metrics","unit","sorting","curation","recording","load",{"skillNo":166,"name":167,"nameZh":6,"description":168,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":80,"licenseFileUrl":169,"sourceHtmlUrl":170,"categories":171,"keywords":175,"publishedAt":43},"01M6FDP0PDK6F1GGX395C7625Z","skill-creator","Guide for creating effective skills. This skill should be used when users want to create a new skill (or update an existing skill) that extends Claude's capabilities with specialized knowledge, workflows, or tool integrations.","https:\u002F\u002Fgithub.com\u002FDicklesworthstone\u002Fpi_agent_rust\u002Fblob\u002Fmain\u002Ftests\u002Fext_conformance\u002Fartifacts\u002Ftemplates-davila7\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fproductivity\u002Fskill-creator\u002FLICENSE.txt","https:\u002F\u002Fgithub.com\u002FDicklesworthstone\u002Fpi_agent_rust\u002Fblob\u002Fmain\u002Ftests\u002Fext_conformance\u002Fartifacts\u002Ftemplates-davila7\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fproductivity\u002Fskill-creator\u002FSKILL.md",[172],{"categoryNo":173,"categoryName":174,"taxonomyType":87,"taxonomyTypeDesc":88},"01JBSEEDCAT000000000000023","Skill与智能体开发",[176,177,178,179,180,181,182,183,184,185,186,187,188,189,28,26,190,24,191],"skill creator","creator","workflows","create","update","capabilities","knowledge","tool","integrations","specialized","guide","new skill","existing skill","users","Existing","new",{"skillNo":193,"name":194,"nameZh":6,"description":195,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":196,"sourceHtmlUrl":197,"categories":198,"keywords":200,"publishedAt":43},"01M6FDM8Y7VK7NYG9SM7QPA3PW","notebooklm","Use this skill to query your Google NotebookLM notebooks directly from Claude Code for source-grounded, citation-backed answers from Gemini. Browser automation, library management, persistent auth. Drastically reduced hallucinations through document-only responses.","https:\u002F\u002Fgithub.com\u002FDicklesworthstone\u002Fpi_agent_rust\u002Fblob\u002Fmain\u002Ftests\u002Fext_conformance\u002Fartifacts\u002Ftemplates-davila7\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fproductivity\u002Fnotebooklm\u002FLICENSE","https:\u002F\u002Fgithub.com\u002FDicklesworthstone\u002Fpi_agent_rust\u002Fblob\u002Fmain\u002Ftests\u002Fext_conformance\u002Fartifacts\u002Ftemplates-davila7\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fproductivity\u002Fnotebooklm\u002FSKILL.md",[199],{"categoryNo":173,"categoryName":174,"taxonomyType":87,"taxonomyTypeDesc":88},[194,201,202,203,204,205,206,134,207,208,33,209,210,211,212,26,213],"google","browser automation","gemini","automation","auth","code","library","management","only","document","query","Citation","source",{"skillNo":215,"name":216,"nameZh":6,"description":217,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":80,"licenseFileUrl":218,"sourceHtmlUrl":219,"categories":220,"keywords":227,"publishedAt":43},"01M6FDHPXE10J3XGTCH5HBHS1M","slack-gif-creator","Knowledge and utilities for creating animated GIFs optimized for Slack. Provides constraints, validation tools, and animation concepts. Use when users request animated GIFs for Slack like \"make me a GIF of X doing Y for Slack.\"","https:\u002F\u002Fgithub.com\u002FDicklesworthstone\u002Fpi_agent_rust\u002Fblob\u002Fmain\u002Ftests\u002Fext_conformance\u002Fartifacts\u002Ftemplates-davila7\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fenterprise-communication\u002Fslack-gif-creator\u002FLICENSE.txt","https:\u002F\u002Fgithub.com\u002FDicklesworthstone\u002Fpi_agent_rust\u002Fblob\u002Fmain\u002Ftests\u002Fext_conformance\u002Fartifacts\u002Ftemplates-davila7\u002Fcli-tool\u002Fcomponents\u002Fskills\u002Fenterprise-communication\u002Fslack-gif-creator\u002FSKILL.md",[221,224],{"categoryNo":222,"categoryName":223,"taxonomyType":87,"taxonomyTypeDesc":88},"01JBSEEDCAT000000000000005","邮件与沟通",{"categoryNo":225,"categoryName":226,"taxonomyType":87,"taxonomyTypeDesc":88},"01JBSEEDCAT000000000000016","图像与多媒体",[228,229,230,177,231,106,232,233,182,33,234,189,235,236,237,26,238,24],"slack gif creator","slack","gif","validation","constraints","Animation","me","make","Utilities","concepts","request"]