Skill UI

This skill guides the comprehensive, multi-step rollout of CodeRabbit AI code review across an entire organization. It covers setting organization-level defaults, customizing team-specific review rules (e.g., API security, frontend performance), and automating deployment via multi-repo scripts and branch protection enforcement. Use when establishing standardized, high-quality AI code review practices company-wide.

A comprehensive guide on installing and configuring CodeRabbit AI, an advanced AI-powered code review platform. Learn how to integrate CodeRabbit into your GitHub or GitLab repositories via App installation, CLI setup, and YAML configuration. Use this guide when setting up the service for the first time or connecting it to new repositories to ensure automated, high-quality code reviews on every pull request.

Configure CodeRabbit CLI to integrate AI-powered code reviews directly into your local development loop. This workflow allows developers to run comprehensive, AI-driven reviews against staged or unstaged changes before committing or pushing to a remote repository. It establishes a crucial 'two-layer' review process, providing instant, fast feedback at the local CLI level, complementing the formal PR review process. This tool is essential for maintaining high code quality and consistency during rapid development cycles.

This guide provides a comprehensive method for optimizing CodeRabbit's review process, focusing on improving speed, relevance, and the signal-to-noise ratio. Learn best practices for managing PR size, selecting the right review profile (e.g., 'assertive' vs. 'chill'), using path instructions to guide feedback, and filtering out low-value files. Ideal for teams looking to reduce review fatigue and ensure consistent code quality checks.

Orchestrates an exhaustive, multi-dimensional code review process by coordinating specialized agents (e.g., security, performance, quality, architecture). This workflow covers code quality, architectural integrity, security vulnerabilities (OWASP Top 10), performance bottlenecks, and test coverage, providing consolidated, actionable feedback and remediation guidance.

A comprehensive guide to structuring effective custom prompts for AI coding assistants like Cursor. Learn the four components of prompt anatomy (Context, Task, Constraints, Format), and utilize reusable templates for complex tasks such as feature implementation, bug fixing, code review, and test generation. Master advanced techniques like Chain of Thought and Few-Shot examples to ensure high-quality, consistent code output.

This comprehensive guide identifies and explains the most common anti-patterns and mistakes when integrating with Customer.io. It covers crucial development topics, including proper API key usage, Unix timestamp formatting, ensuring correct event tracking order (Identify before Track), and optimizing API calls for performance. Use this as a definitive checklist for code review and developer onboarding.

Performs security-focused differential review of PRs, commits, and diffs, adapting depth to repo size, tracing git history, estimating blast radius, checking coverage, and producing detailed markdown reports to stop regressions.

Performs authorized file path traversal assessments to map web inputs, craft traversal payloads, and document sensitive files that can be read, aiding defenders in hardening filesystem handling during security reviews.

Performs a structured, multi-phase audit on local branch changes (diffs) to identify security vulnerabilities, bugs, and code quality issues. It systematically checks for common risks like Injection (SQL, XSS), Broken Authentication, IDOR, CSRF, and business logic flaws, providing detailed severity, evidence, and suggested fixes. Ideal for pre-merge code reviews and security audits.

This comprehensive guide identifies common anti-patterns and integration mistakes when using Firecrawl for web scraping and content extraction. It serves as a vital code review checklist, helping developers avoid pitfalls such as unbounded crawling, unspecified output formats, or aggressive API polling, ensuring robust and efficient data pipelines.

Automated fuzz testing of APIs via the /fuzz-api command to inject malformed, boundary, and random payloads, spotting crashes, SQL injection, XSS, and validation gaps during vulnerability scanning or security reviews.