MCP App StoreMCP App Store
from claude-code-plugins-plus-skills2,485
Security best practices for integrating Speak: API key management, audio data privacy, student data protection, and COPPA/FERPA compliance for production deploy
Provides a concise, actionable checklist and implementation patterns for securing Speak integrations: protecting API keys, ensuring audio data privacy, redacting student PII, and complying with COPPA/FERPA where applicable. Includes example commands and code snippets for common tasks.
Use this skill when deploying or auditing a Speak-powered application—especially language learning apps handling student audio—during production hardening, onboarding, or incident response.
Best for developer-oriented assistants and runtime tooling that can run shell commands and edit repos (Codex/Claude Code/Copilot-like agents).
Security best practices skill for the Speak API integration, covering API key management, audio data privacy, student data protection, and COPPA/FERPA compliance. No bundled scripts — static SKILL.md only. Clean security posture with no risky patterns; recommends secrets managers and .gitignore. Well-structured with error handling table and checklist, but narrowly scoped to one SaaS product.
Solid niche skill for Speak API users. Good security practices promoted (secrets manager, audio deletion, PII redaction). Limited audience reach given it's specific to one SaaS product.
Navan Migration — Deep Dive
End-to-end migration playbook for moving from SAP Concur or legacy TMC to Navan: data export, user provisioning (SCIM/CSV), policy recreation, parallel running
Cursor Hello World Tutorial
A concise 10-minute hands-on tutorial demonstrating Cursor's Tab completion, Chat, Inline Edit, and Composer features for getting started quickly.
Contagious — STEPPS Virality Framework
Apply the STEPPS (Social Currency, Triggers, Emotion, Public, Practical Value, Stories) framework to engineer word-of-mouth and make content, products, or campa
Supabase SDK Patterns (TypeScript & Python)
Production-ready patterns for using Supabase clients in TypeScript and Python: client initialization, typed queries, auth, realtime, storage, RPC, and error-han
Runway Prod Checklist
Production checklist and SDK patterns for integrating Runway (AI video/image generation) into production workflows.
RemoFirst — Core Workflow A
Onboarding workflow for RemoFirst: create employee records, upload compliance documents, and track country-specific onboarding status.
Klaviyo — Webhooks & Events
Patterns and reference code to receive, verify (HMAC-SHA256), route, and idempotently process Klaviyo webhook events in production services.
Lokalise Migration — Deep Dive
Step-by-step migration guide and tooling for moving translations from Crowdin/Phrase/POEditor into Lokalise, including transforms, uploads and validation.
React Context Setup
Automates guidance and code patterns for setting up React Context, providing step-by-step configuration and best-practice examples for frontend projects.
Replit — Advanced Troubleshooting
Step-by-step diagnostics and debugging techniques for deep Replit issues: Nix build failures, container crash loops, memory leaks, and platform vs app isolation
TradeOS
Natural-language driven CEX trading and portfolio management for agents: API key vaulting, multi-exchange orders, DCA, arbitrage scanning, alerts and security r
Godot WeChat Minigame Adapter
Apply a version-locked adapter and patch bundle to port an official Godot checkout to WeChat Mini Game, handling WXMEMFS, wasm packaging, audio fixes, and runti
ezBookkeeping API Tools
Command-line API tools for ezBookkeeping: record and query transactions, retrieve accounts/categories/tags, and fetch exchange rates for self-hosted personal fi
Spring Boot Migration
Guided, phased migration for existing Spring Boot apps to Boot 4 / Java 25 (including Modulith 2 and Testcontainers 2), with scanners and reference guides.
Java 25 & Spring Boot 4 Code Reviewer
Run focused, evidence-based code reviews for Java 25 and Spring Boot 4 projects — migration risks, architecture boundaries, null-safety (JSpecify), security, an
ArcKit — French Public Procurement (fr-marche-public)
Generates French public procurement (Dossier de Consultation des Entreprises) drafts aligned with the Code de la Commande Publique, UGAP frameworks, and DINUM d
ArcKit Architecture Conformance
Run a systematic architecture conformance assessment that compares ADRs and principles against HLD/DLD artifacts to surface drift, violations, and technical deb
Vibe Security Auditor
Audits AI-generated codebases for critical security flaws like exposed keys, broken RLS, and insecure payment flows.