What problem does it solve? Cloudinary media work in MDE risks scope creep, leaked secrets, and unverified webhooks when there is no clear integration boundary. This Skill defines when Cloudinary is actually in scope and enforces safe upload, transformation, deletion, and webhook behavior. ## Core Features & Use Cases - Scope Verification: Confirms Cloudinary is genuinely required before introducing it, since the current repo has no active Cloudinary dependency. - Security Invariants: Keeps API and signing secrets server-side, prefers signed uploads, and verifies webhook signatures before side effects. - Data Ownership Boundaries: Keeps durable business metadata in Supabase while treating Cloudinary as media infrastructure only. - Use Case: When adding a venue photo upload flow, use this Skill to implement signed uploads, validate asset ownership before deletion, and hand off metadata persistence to the supabase skill. ## Quick Start Use the cloudinary skill to implement a signed image upload flow with webhook signature verification for the venue photos feature.