Agent skill · security · jeremylongshore
framer-security-basics
Apply Framer security best practices for secrets and access control.
Why this skill is useful
Provides specific security practices and scripts for managing Framer API keys and access control that are not widely known.
What it needs
Requires framer account access. About 2k tokens when loaded. Last updated 2026-08-07. 2,604 stars on the source repository.
What this skill does
Framer Security Basics Prerequisites A security owner, least-privilege access policy, secret-manager references, domain/DNS ownership, and synthetic test project. Output Maintain a security receipt with identity scope, control result, access-review date, owner, and redacted incident state. Do not include keys, form submissions, or private content. Error Handling Deny unexpected permissions or publishing destinations, revoke access on suspected exposure, and route incidents through the designated owner. Examples Use a staging site to verify a temporary collaborator cannot publish to production, remove access, and record only the control outcome and opaque project reference. Overview Security best practices for Framer API keys, plugin development, and Server API access. Instructions Step 1: Credential Management Credential Scope Where to Store ----------- ------- ---------------- Server API Key (framersk) Per-site Secrets vault Site ID Per-site Can be in config Plugin auth tokens Per-user session Never persist Step 2: Plugin Security Step 3: Server API Key Rotation Step 4: Security Checklist [ ] API keys in environment variables, never in code [ ] .env in .gitignore [ ] Plugin never stores or exposes API keys [ ] Server API accessed only from backend, never client [ ] Pre-commit hook scans for framersk leaks [ ] HTTPS-only for all API communication Resources Framer Server API Plugin Security Next Steps For production deployment, see framer-prod-checklist.
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills jeremylongshore/framer-security-basics