Cloudinary Skill (optional)
Guardrails
- Never commit Cloudinary secrets.
- Keep signed uploads and secret-based operations server-side.
When to use
- Implementing admin media upload, image optimization, transformations, or CDN delivery.
Workflow checklist
- Confirm dependency/SDK choice and ask before adding dependencies.
- Decide upload strategy: signed uploads (recommended) vs unsigned presets (careful).
- Store only what you need in DB (e.g.,
public_id,resource_type,format,width/height,secure_url). - Apply transformations via URLs; keep defaults consistent with the design system.
- Add basic validation (file type/size) and abuse protection (rate limiting where applicable).