Skill UI

A comprehensive diagnostic guide for resolving the 10 most common Langfuse integration errors. This resource covers root causes, specific error codes (like 401 Unauthorized or connection timeouts), and provides tested solutions for debugging missing traces, authentication failures, and general LLM observability issues.

This SDK provides comprehensive tools for developing enterprise-grade, multi-channel agents for the Microsoft 365 ecosystem. Utilizing ASP.NET Core hosting, it supports integration with Teams, Copilot Studio, and general M365 services. Key features include robust agent application routing, structured state management, and secure authentication using MSAL.

Performs pattern-driven searches for similar vulnerabilities across repositories after a known issue is found, guiding analysts through precise generalization, triage, and tool choices (ripgrep, Semgrep, CodeQL) to audit and prioritize true positives.

This skill enables teams to create, manage, and organize custom prompt libraries for developer workflows within the Cascade environment. Users can build reusable prompt templates for common tasks, including code generation, code review, documentation, debugging, and general software development, ensuring consistency and boosting team efficiency.

This skill provides AI-assisted performance profiling within the Windsurf IDE. It analyzes collected profiling data to pinpoint performance bottlenecks, suggest specific optimizations, and predict the impact of code changes. Use it when optimizing application speed, refining complex algorithms, or general performance tuning in a coding environment.

Offers MATLAB and GNU Octave guidance for matrix math, data import/export, visualizations, statistics, signal processing, differential equations, and general scripting—helpful when writing or translating MATLAB/Octave code and running scripts under either interpreter.

Parallel Web Research skill orchestrates Parallel Chat and Extract APIs to search the internet, perform deep intelligence work, and craft cited summaries, with model controls, JSON outputs, and citation verification for market, news, technical, and general queries.

A rigorous, security-focused code review process designed for Pull Requests (PRs), commits, and diffs. It moves beyond general reviews by focusing intensely on high-risk areas such as authentication, cryptography, external calls, and value transfer. The methodology is evidence-based, requiring detailed attack scenario modeling and generating comprehensive, auditable markdown reports to identify overlooked vulnerabilities and regressions.

A systematic skill for identifying similar vulnerabilities and bugs across large, complex codebases. It guides the user through generalizing initial bug patterns using techniques like CodeQL and Semgrep, ensuring comprehensive security audits beyond the initially discovered flaw. Ideal for advanced security research and robust code auditing.

This skill guides the detection and exploitation of JavaScript prototype pollution vulnerabilities. It covers both client-side (DOM XSS) and server-side (RCE, Auth Bypass) attacks by injecting properties into Object.prototype using keys like `__proto__`. Use this when assessing APIs that deep-merge or clone user-controlled JSON data, or for general web application security testing.

A comprehensive set of specialized tools for deep interaction with source codebases. This context-mode is mandatory for advanced tasks such as running code snippets, analyzing files, batch processing repository commands, indexing knowledge, searching content, and fetching web data. It ensures that interactions are context-aware and highly efficient, moving beyond basic file listing or general chat prompts.

Copilot Spaces allow users to consolidate and manage project-specific knowledge, including documentation, code snippets, architectural standards, and operational instructions. By loading a Space, Copilot grounds its responses not just on general knowledge, but on the curated, authoritative context of the entire project, enabling accurate Q&A, code generation, and workflow execution based on team standards. Ideal for onboarding, large-scale projects, and maintaining consistency.