Skill UI

A comprehensive guide to establishing production-ready coding standards and context for the Windsurf AI environment. Learn how to utilize root-level rules (.windsurfrules), granular workspace rules, Model Context Protocol (MCP) server integration, and advanced prompt engineering to guide the AI and maintain consistent code quality across projects.

Provides comprehensive expertise for building robust WordPress sites. Specializing in custom theme and plugin development, implementing modern Gutenberg blocks, extending WooCommerce functionality, and managing the WordPress REST API. Core focus areas include advanced security hardening (nonces, sanitization, capability checks), performance optimization (caching, query tuning), and adhering strictly to WordPress coding standards.

Audits GitHub Actions workflows that invoke AI coding agents to surface prompt injection and sandbox risks, tracing attacker-controlled inputs through env vars, reusable actions, and workflow references before deployment or code review.

Performs static security analysis on GitHub Actions workflows that incorporate AI coding agents (e.g., Claude, Gemini, OpenAI). This skill helps identify critical data flow vulnerabilities, such as where attacker-controlled input can reach AI agent prompts or internal systems via CI/CD pipelines, going beyond simple expression checks.

Master robust and type-safe patterns for React development using fp-ts. This guide covers managing state with Option, sophisticated form validation using Either (collecting all errors), and handling asynchronous data fetching with TaskEither. It promotes a highly functional, predictable coding style for React 18/19 and Next.js.

This skill acts as an expert assistant for the Makepad DSL (Domain Specific Language) used with the Rust `makepad-widgets` crate. It helps users generate correct DSL code, explain complex syntax rules (like inheritance and property overriding), and understand how to link standard Rust structures to UI definitions. Ideal for developing complex, live-designed user interfaces within the Makepad framework.

This assistant specializes in the Makepad shader system. It helps users write, debug, and understand complex shader code using SDF2d and GLSL principles. Use it when developing custom widget backgrounds, advanced graphics, gradients, or visual effects that require low-level GPU rendering control within the Makepad framework.

This skill provides a comprehensive guide for creating production-quality custom Semgrep rules. It teaches best practices for detecting security vulnerabilities, enforcing robust coding standards, and identifying specific bug patterns. By emphasizing a test-first approach and utilizing advanced techniques like taint mode, users can write highly accurate static analysis rules that drastically reduce false positives.

Varlock is a secure-by-default CLI tool designed to manage and validate sensitive environment variables and secrets during coding sessions, CI/CD, and development workflows. It ensures that credentials, API keys, and passwords are never exposed in logs, terminal output, error messages, or the assistant's context, providing a critical layer of security for modern development practices.

A deep specialist for the Anthropic Claude Code CLI. This tool maximizes developer productivity by managing complex coding workflows. It provides advanced features like custom hooks, structured context retention via CLAUDE.md, sub-agent orchestration, and comprehensive system integration for terminal-based coding tasks.

Automates feature delivery by reading specs, designing architecture, coding in src/, adding tests, and preparing handoff notes while following structured checklists.

This skill orchestrates the entire coding lifecycle as a state machine, ensuring tasks proceed from issue intake through implementation, structured review, deployment, and final acceptance verification. It enforces a rigorous 'Definition of Done' (DoD) proof, moving beyond simple code changes. Ideal for complex feature development requiring structured handoffs and explicit verification evidence.