Skill UI

Validates PCI DSS compliance by running the pci-dss-validator plugin on codebases or infrastructure configs, then reports violations and remediation steps for developers, security engineers, and compliance officers.

Automates Vault Secrets Integrator guidance for DevOps Advanced tasks, covering kubernetes, terraform, CI/CD, monitoring, and infrastructure as code best practices to deliver validated configs and code.

This skill functions as a documentation architect, capable of generating highly structured wiki catalogues and comprehensive onboarding guides directly from a codebase. It scans the repository, detects architectural patterns, identifies technical layers (presentation, business logic, data access), and creates two distinct guides: a Principal-Level Guide for seniors and a Zero-to-Hero Path for newcomers, ensuring every detail is cited with specific file paths.

This skill simulates a senior documentation engineer, generating highly structured, evidence-based technical documentation. It processes codebases to create comprehensive wiki pages, mandating deep structural analysis, citing specific code paths (file:line), and incorporating mandatory architectural diagrams (Mermaid). Ideal for creating deep-dive system manuals, component guides, and technical deep dives with verifiable sources.

This comprehensive guide outlines the process of migrating development teams from established AI Integrated Development Environments (IDEs) like VS Code/Copilot or Cursor to Windsurf. It covers technical steps such as converting project rules, transferring settings and keybindings, and planning a structured, phased team rollout and rollback strategy for a smooth transition.

This skill guides the development of custom extensions for the Windsurf environment, leveraging the full VS Code Extension API. You will learn to track various workspace events—such as file saves, editor changes, and terminal outputs—and integrate this data with external services by sending structured webhooks. This is essential for building complex workflow automation, implementing custom IDE features, or creating data analytics tools within the development lifecycle.

Automated guidance for YAML configuration validation tasks within the DevOps Basics domain, covering version control, containers, CI/CD, and infrastructure fundamentals while producing production-ready code and configurations.

A comprehensive development tool for building and managing enterprise-grade transactional email systems. It supports modern React Email and MJML templates, generating production-ready code for major providers like Resend, Postmark, and SendGrid. Key features include multi-provider integration, internationalization (i18n), dark mode, spam score optimization, and advanced analytics tracking. Ideal for setting up new products or migrating legacy email infrastructure.

A powerful skill for conducting structured, systematic code reviews for PRs and MRs. It goes beyond basic style checks, performing deep analysis such as blast radius tracing, comprehensive security scanning (SQLi, XSS, secrets), detecting breaking changes in APIs/DB schemas, and calculating test coverage delta. Ideal for reviewing large, complex, or security-sensitive code changes before merging.

Comprehensive guide and expert assistance for building, refactoring, and validating AWS cloud infrastructure using the AWS Cloud Development Kit (CDK). Covers best practices for TypeScript and Python, including resource naming conventions, Lambda function development, and multi-layer pre-deployment validation using tools like cdk-nag.

Analyzes a code repository to generate a recommended, minimal set of read-only shell command permissions for Claude Code's settings.json. It automatically detects the project's tech stack (e.g., Python, Node.js, Go), build tools, and monorepo structure, ensuring a safe and evidence-based security baseline for new projects or auditing existing permissions.

An expert agent focused on enhancing code clarity, consistency, and maintainability. It simplifies complex code structures, eliminates redundant logic, and applies project-specific best practices, all while guaranteeing that the original functionality and behavior remain absolutely unchanged. Ideal for code reviews, cleanup tasks, or improving readability.