Skill UI

This comprehensive guide details how to control and audit the scope of code and data accessible by AI tools (like Codeium or Windsurf AI). Learn to implement robust data exclusion patterns, set compliance boundaries (e.g., HIPAA, GDPR), and configure secure deployment modes, ensuring sensitive data and secrets are never processed or retained by the AI model.

This skill provides comprehensive, AI-assisted linting configuration for ensuring high code quality standards. It assists with setting up and integrating major linting tools (such as ESLint, Prettier, and Stylelint), helping resolve complex configuration conflicts, suggesting best practices based on project patterns, and fully automating code quality enforcement across the development lifecycle. Use this when establishing or refining coding standards for a project.

This guide outlines the Windsurf reference architecture, providing an optimal project structure for development, configuration, and AI context management. It covers rules hierarchy, workflow organization, monorepo strategies, and context pinning to maximize the effectiveness of AI assistants and development tools.

A comprehensive workflow for building and optimizing e-commerce stores using WooCommerce. This guide covers all phases, including store setup, payment gateway integration, shipping configuration, and custom product types. It heavily integrates advanced WordPress 7.0 features, such as AI-powered content generation, fraud detection, and real-time team collaboration tools, ensuring a modern, highly functional online store.

Provides red team workflows combining subdomain enumeration, live host discovery, technology fingerprinting, XSS hunting, API fuzzing, and automated recon scripting to support bug bounty hunters and security researchers.

AnnData supplies a Python-native container for annotated matrices, letting researchers store measurements alongside rich metadata, read/write h5ad/zarr/loom/10X files, and integrate with the scverse tools when building single-cell or related data workflows.

A specialized assistant designed to act as a senior software architect. It critiques code generated by AI tools or rapidly prototyped code, moving beyond simple syntax checks. The auditor identifies deep structural flaws, technical debt, architectural weaknesses, and production risks (e.g., security vulnerabilities, poor error handling, tight coupling) that make code fragile or unsuitable for deployment.

This skill automates the creation of isolated, pre-configured development containers (devcontainers). It scans the project structure to detect supported languages (Python, Node.js, Rust, Go) and intelligently generates the necessary configuration files, VS Code extensions, and setup scripts. It ensures all required tools are installed in a sandboxed environment, making it ideal for starting new multi-language projects or needing consistent, reproducible development workspaces.

A comprehensive design specification detailing 98 rules for building Command Line Interface (CLI) tools that are safe, reliable, and easily consumable by AI agents. It covers structured JSON output formats, standardized error handling (to stderr), robust input contracts, safety guardrails (e.g., preventing path traversal), and tiered compliance levels (Agent-Friendly, Agent-Ready, Agent-Native) for seamless integration into AI workflows.

This guide details comprehensive methods for auditing Terraform infrastructure-as-code (IaC) against security misconfigurations. By leveraging industry-standard tools like Checkov, tfsec, Terrascan, and Open Policy Agent (OPA), users can detect critical vulnerabilities—such as overly permissive IAM policies, public resource exposure, and missing encryption—before cloud deployment. It is essential for integrating robust security gates into CI/CD pipelines and enforcing compliance standards.

AWT provides AI coding tools with the ability to perform sophisticated End-to-End (E2E) web testing using a real browser. It accepts declarative YAML scenarios and executes them via Playwright. Key features include visual matching (OpenCV + OCR) instead of relying on fragile DOM selectors, automatic platform detection (React, Vue, etc.), and structured failure diagnosis for improved AI coding workflows.

This skill provides a comprehensive framework for building automated pipelines that ingest, normalize, and operationalize threat intelligence (TI). It connects diverse sources—including STIX/TAXII feeds, open-source feeds (e.g., Abuse.ch), and commercial TI platforms—into SIEM and security tools. Use this when SOC teams need to automate the entire lifecycle of IOC ingestion, scoring, and real-time matching against network telemetry.