Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →Apply Framer security best practices for secrets and access control. Use when securing API keys, implementing least privilege access, or auditing Framer security configuration. Trigger with phrases like "framer security", "framer secrets", "secure framer", "framer API key security".
.claude/skills/jeremylongshore-framer-security-basics/SKILL.md| Test case | Without → With | Effect | Δ tokens | Δ turns |
|---|---|---|---|---|
| case-07 | ✗→✓ | ▲ Improved | -38% | 0% |
| case-10 | ✗→✓ | ▲ Improved | -51% | 0% |
| case-14 | ✗→✓ | ▲ Improved | -41% | 0% |
| case-15 | ✗→✓ | ▲ Improved | -35% | 0% |
| case-18 | ✗→✓ | ▲ Improved | -59% | 0% |
Security best practices for Framer API keys, plugin development, and Server API access.
| Credential | Scope | Where to Store | |-----------|-------|----------------| | Server API Key (framer_sk_*) | Per-site | Secrets vault | | Site ID | Per-site | Can be in config | | Plugin auth tokens | Per-user session | Never persist |
bash# .env (never commit) FRAMER_API_KEY=framer_sk_abc123... FRAMER_SITE_ID=abc123 # .gitignore .env .env.local
tsx// Plugins run in Framer's iframe sandbox — limited browser APIs // Never store secrets in plugin code (it's client-side) // Fetch external data through your own API proxy const data = await fetch('https://your-api.com/framer-data', { headers: { 'Authorization': `Bearer ${sessionToken}` }, });
bash# 1. Generate new key in Framer site settings # 2. Update in secrets vault # 3. Test connection node -e " const { framer } = require('framer-api'); framer.connect({ apiKey: process.env.FRAMER_API_KEY, siteId: process.env.FRAMER_SITE_ID }) .then(() => console.log('OK')) .catch(e => console.error('FAIL', e.message)); " # 4. Revoke old key in site settings
.env in .gitignoreframer_sk_* leaksFor production deployment, see framer-prod-checklist.
| Case | Status | Duration (ms) | Turns | Tokens | Tool calls | ||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Without | With | Δ | Without | With | Δ | Without | With | Δ | Without | With | Δ | ||
case-01 | fail→fail | 18,475 | 14,839 | -20% | 1 | 1 | 0% | 2,438 | 2,509 | +3% | 0 | 0 | — |
case-02 | fail→fail | 21,895 | 17,033 | -22% | 1 | 1 | 0% | 2,943 | 2,605 | -11% | 0 | 0 | — |
case-03 | fail→fail | 15,141 | 14,688 | -3% | 1 | 1 | 0% | 2,537 | 2,167 | -15% | 0 | 0 | — |
case-04 | pass→pass | 21,050 | 11,341 | -46% | 1 | 1 | 0% | 2,671 | 2,407 | -10% | 0 | 0 | — |
case-05 | pass→pass | 15,328 | 15,072 | -2% | 1 | 1 | 0% | 2,014 | 2,398 | +19% | 0 | 0 | — |
case-06 | pass→pass | 17,563 | 15,823 | -10% | 1 | 1 | 0% | 3,446 | 4,060 | +18% | 0 | 0 | — |
case-07 | fail→pass | 15,897 | 5,651 | -64% | 1 | 1 | 0% | 2,471 | 1,527 | -38% | 0 | 0 | — |
case-08 | pass→pass | 17,204 | 8,061 | -53% | 1 | 1 | 0% | 2,064 | 1,068 | -48% | 0 | 0 | — |
case-09 | pass→pass | 13,780 | 3,208 | -77% | 1 | 1 | 0% | 1,472 | 1,002 | -32% | 0 | 0 | — |
case-10 | fail→pass | 16,408 | 3,789 | -77% | 1 | 1 | 0% | 1,751 | 858 | -51% | 0 | 0 | — |
case-11 | fail→fail | 13,423 | 8,219 | -39% | 1 | 1 | 0% | 1,389 | 1,050 | -24% | 0 | 0 | — |
case-12 | pass→pass | 13,817 | 11,109 | -20% | 1 | 1 | 0% | 2,520 | 2,515 | -0% | 0 | 0 | — |
case-13 | pass→pass | 11,429 | 5,698 | -50% | 1 | 1 | 0% | 1,916 | 1,436 | -25% | 0 | 0 | — |
case-14 | fail→pass | 17,935 | 4,005 | -78% | 1 | 1 | 0% | 2,338 | 1,373 | -41% | 0 | 0 | — |
case-15 | fail→pass | 14,026 | 5,580 | -60% | 1 | 1 | 0% | 2,469 | 1,613 | -35% | 0 | 0 | — |
case-16 | pass→pass | 10,642 | 7,365 | -31% | 1 | 1 | 0% | 1,883 | 2,076 | +10% | 0 | 0 | — |
case-17 | pass→pass | 5,375 | 6,171 | +15% | 1 | 1 | 0% | 890 | 711 | -20% | 0 | 0 | — |
case-18 | fail→pass | 15,539 | 1,690 | -89% | 1 | 1 | 0% | 1,924 | 793 | -59% | 0 | 0 | — |
case-19 | pass→pass | 7,829 | 2,279 | -71% | 1 | 1 | 0% | 1,645 | 1,045 | -36% | 0 | 0 | — |
case-20 | fail→pass | 10,564 | 11,927 | +13% | 1 | 1 | 0% | 2,127 | 1,682 | -21% | 0 | 0 | — |
case-21 | pass→pass | 15,414 | 11,030 | -28% | 1 | 1 | 0% | 2,099 | 1,797 | -14% | 0 | 0 | — |
case-22 | pass→pass | 10,485 | 3,585 | -66% | 1 | 1 | 0% | 2,050 | 1,281 | -38% | 0 | 0 | — |
case-23 | pass→fail | 7,429 | 3,765 | -49% | 1 | 1 | 0% | 1,350 | 1,088 | -19% | 0 | 0 | — |
DecimalAI ran this skill against gemini-3.6-flash twice over the same eval suite — once with the skill loaded and once without — and compared the two runs case by case. 23 cases were attempted. The headline lift of +22 percentage points is the difference between those two pass rates over the 23 comparable cases. 1 case got worse with the skill loaded, and it is included in that figure.
Without the skill loaded, the model failed this case. With it loaded, the same prompt on the same model passed. This is one improved case from the latest verified run; every case, including any that regressed, is in the table above.
Other measured skills in the registry, with their headline benchmark lift.