Skill UI

This central skill specializes in performing comprehensive threat modeling using STRIDE and calculating risk via DREAD scoring. It guides users through defining scope, identifying threats, and planning mitigations for new architectures. Crucially, it acts as a security router, directing specialized requests—such as pen-testing, incident response, cloud posture checks, and AI security reviews—to the appropriate dedicated skill.

This guide provides enterprise-grade architectural patterns for integrating Sentry into multi-service, microservices environments. It covers centralized configuration modules, standardized project topologies (e.g., one project per service), distributed tracing setup, and robust error handling middleware for Node.js, Express, and Python/FastAPI. Ideal for organizations planning large-scale Sentry rollouts or managing complex service ecosystems.

Guides senior architects through asking discovery questions, defining use cases, selecting patterns, and planning folder layout before crafting SKILL.md instructions for consistent agent behavior.

This skill simulates a complete, multi-agent software development lifecycle following the principles of Agile and Scrum. It guides the project through six distinct, iterative phases: Architectural Planning, Parallel Implementation, Comprehensive Testing (Unit/E2E), Review, and Finalization. The process uses a convergent diffusion model, refining specifications and resolving conflicts across multiple specialized agents until the project converges and is deemed complete.

A comprehensive skill for structured software development life cycle (SDLC). It guides users through adaptive phases—Specify, Design, Tasks, and Execute—ensuring that every feature is built with traceable requirements, atomic tasks, and rigorous verification. Features include an independent Verifier, persistent decision logging, and a self-improving lessons layer to enhance future development quality. Ideal for complex, multi-component feature implementation.

Provides a structured reference covering the 100 most critical web vulnerabilities, including definitions, root causes, impacts, and mitigation guidance aligned with OWASP categories to support assessments and remediation planning.

This comprehensive guide helps developers select and implement optimal Vercel architecture blueprints based on project scale and complexity. It covers five validated patterns, ranging from simple static JAMstack sites and robust full-stack SaaS applications, to advanced multi-zone micro-frontend enterprise deployments. Use this resource when planning new deployments, optimizing scaling strategies, or structuring complex monorepos.

Automated assistant for planning and implementing webhook retry handlers within API integration workflows, offering best practices and production-ready code or configuration validation.

This skill provides comprehensive dependency management for software projects. It analyzes the entire dependency tree to identify security vulnerabilities, suggest safe updates, and help plan major version migration paths. Use this when performing security audits, managing third-party library updates, or planning complex project upgrades.

This comprehensive guide outlines the process of migrating development teams from established AI Integrated Development Environments (IDEs) like VS Code/Copilot or Cursor to Windsurf. It covers technical steps such as converting project rules, transferring settings and keybindings, and planning a structured, phased team rollout and rollback strategy for a smooth transition.

This skill manages complex, large-scale refactoring operations that span hundreds or thousands of files. It provides phased execution with checkpoints, comprehensive rollback capabilities, and AI-assisted planning. Use it for codebase migrations, major architecture refactoring, or system-wide updates.

This skill provides guidance for implementing tasks using structured workflow patterns, specifically following Conductor's TDD (Test-Driven Development) workflow. It helps manage phase checkpoints, organize git commits, and execute rigorous verification protocols. Use it when adhering to a defined development plan, ensuring quality gates are passed, and managing the entire lifecycle from initial planning to final validation.