10 actions in 10 pieces of software · ranked by words, meaning and measured trust · 646 ms

1. 1vtex-io-http-routesverified and signedpassport

   skillvtex/skillsrecord

   • vtex-io-http-routes

     Apply when designing or implementing HTTP endpoints exposed by a VTEX IO backend service. Covers route boundaries, handler structure, middleware composition, request validation, and response modeling for service.json routes. Use for webhook endpoints, partner integrations, callback APIs, or reviewin

2. 2vtex-io-service-paths-and-cdnverified and signedpassport

   skillvtex/skillsrecord

   • vtex-io-service-paths-and-cdn

     Apply when defining service.json routes, choosing public vs segment vs private URL prefixes for VTEX IO services, or setting HTTP cache headers that interact with the VTEX edge and CDN. Covers path patterns, cookie visibility, edge caching behavior, and aligning Cache-Control with data sensitivity.

3. 3vtex-io-rootpathverified and signedpassport

   skillvtex/skillsrecord

   • vtex-io-rootpath

     Apply when building VTEX IO apps that must work correctly in multi-binding stores where bindings use path prefixes (e.g. store.com/us/, store.com/br/). Covers rootPath extraction from x-vtex-root-path header, useRuntime().rootPath in React, URL construction in backends, link generation, asset paths,

4. 4vtex-io-service-appsverified and signedpassport

   skillvtex/skillsrecord

   • vtex-io-service-apps

     Apply when building backend service apps under node/ in a VTEX IO project or configuring service.json routes. Covers the Service class, middleware functions, ctx.clients pattern, JanusClient, ExternalClient, MasterDataClient, and IOClients registration. Use for implementing backend APIs, event handl

5. 5vtex-io-security-boundariesverified and signedpassport

   skillvtex/skillsrecord

   • vtex-io-security-boundaries

     Apply when reviewing or designing security-sensitive boundaries in VTEX IO apps. Covers public versus private exposure, trust assumptions at route and integration boundaries, sensitive data handling, validating what crosses the app boundary, and avoiding leakage across accounts, workspaces, users, o

6. 6vtex-io-service-runtimeverified and signedpassport

   skillvtex/skillsrecord

   • vtex-io-service-runtime

     Apply when designing or implementing the runtime structure of a VTEX IO backend app under node/. Covers the Service entrypoint, typed context and state, service.json runtime configuration, and how routes, events, and GraphQL handlers are registered and executed. Use for structuring backend apps, def

7. 7vtex-io-events-and-workersverified and signedpassport

   skillvtex/skillsrecord

   • vtex-io-events-and-workers

     Apply when designing or implementing asynchronous processing in VTEX IO services through events, workers, and background handlers. Covers event handler structure, idempotency, retry-safe processing, and moving expensive work out of request-response routes. Use for event-driven integrations, delayed

8. 8vtex-io-rbacverified and signedpassport

   skillvtex/skillsrecord

   • vtex-io-rbac

     Apply when controlling access to VTEX IO app resources using role-based or resource-based policies. Covers policies.json for role-based access control, service.json policies for resource-based access, VRN syntax for principals, the difference between app-to-app and user/integration access, and Graph

9. 9vtex-io-auth-and-policiesverified and signedpassport

   skillvtex/skillsrecord

   • vtex-io-auth-and-policies

     Apply when deciding or implementing permissions and authorization boundaries for VTEX IO apps. Covers manifest policies, outbound-access rules, least-privilege design, and how service routes or integrations map to explicit permissions. Use for deciding who is authorized to call or consume a capabili

10. 10vtex-io-storefront-theme-appverified and signedpassport

    skillvtex/skillsrecord

    • vtex-io-storefront-theme-app

      Apply when designing or modifying a VTEX IO storefront theme app — the app that owns `store/blocks.json`, `store/routes.json`, `store/templates/`, `store/contentSchemas.json`, and the storefront page tree assembled from `store.home`, `store.product`, `store.search`, `store.custom`, and other native