Skill UI

This skill automates the entire software release workflow within Windsurf. It analyzes commit history based on conventional commits to determine the correct semantic version bump (major, minor, or patch). It then automatically generates comprehensive changelogs, manages Git tags, updates version files, and publishes the final release package to a registry. It is essential for teams implementing robust CI/CD practices.

A comprehensive guide to securing development workspaces using Windsurf. This skill teaches how to apply best practices for workspace isolation, prevent sensitive data (secrets, PII) from leaking into AI indexes, manage telemetry, and ensure compliance by configuring exclusion files and security rules.

This skill automates the creation of comprehensive test suites for any codebase. Utilizing advanced AI capabilities, it analyzes function signatures, automatically identifies potential edge cases, generates meaningful assertions, and produces necessary mock data and fixture files. It is essential for developers needing robust unit tests, increasing code coverage, and adopting Test-Driven Development (TDD) workflows across various frameworks like Jest or pytest.

Guides writing Hookify rules that watch commands, files, prompts, or stop events, using YAML frontmatter to define patterns, actions, and messages for enforcing safety checks or reminders.

Workflow for parsing SillyTavern-compatible character cards and world info from PNG/WebP/JSON files using a dedicated Node.js parser, with clear steps for copying presets, installing deps, running the extractor, and verifying results.

A comprehensive security scanner designed to audit AI agent skills before deployment. It analyzes source code (Python, Bash, JS), detects critical vulnerabilities like command injection, network exfiltration, and unsafe deserialization. Furthermore, it scans markdown files for prompt injection attacks, and assesses dependency supply chain risks, providing a clear PASS/WARN/FAIL verdict and remediation guidance.

A command-line utility designed to search, extract, and analyze data from Burp Suite project files (.burp). It allows users to search request/response headers and bodies using complex regex patterns, extract security audit findings, or gather proxy/site map data. Essential for deep analysis of captured HTTP traffic in web security testing, while providing safeguards against large data overflows.

This skill simulates a senior engineer's final, deep audit of an entire codebase before committing or pushing to a remote repository. It systematically checks for junk files, dead code, security vulnerabilities (secrets, injection flaws), and performance bottlenecks (N+1 queries). Use this pre-flight check before any major release or public deployment to ensure maximum code quality and production readiness.

This skill guides developers in creating, editing, and validating EAS CI/CD workflow YAML files for Expo projects. It provides comprehensive instructions on defining workflow triggers, structuring jobs, managing dependencies, and ensuring deployment automation adheres to the latest Expo schema and best practices.

This script automates the generation of a complete set of favicons (including favicon.ico, various PNG sizes, and SVG) from a single source image. It intelligently detects the project framework (e.g., Next.js, Rails, Gatsby) to place assets in the correct static directory, generates the necessary webmanifest, and updates the project's HTML/layout files with the proper link tags.

This specialized AI acts as an auditor for Medical Devices (SaMD) compliance. It reviews critical documentation like Design History Files (DHF) and technical files against major global regulations, including 21 CFR Part 820, IEC 62304, and ISO 13485. It identifies compliance gaps, cites specific regulations, and provides actionable remediation steps to prepare for regulatory audits.

This tool automates the creation of production-ready End-to-End (E2E) tests using the Playwright framework. Users can provide natural language descriptions (like user stories, feature names, or component paths) to automatically generate comprehensive test suites. It follows best practices, including utilizing role-based locators, structuring tests with setup/act/assert phases, and generating supporting files like page objects and fixtures for maintainability.