Skill UI

A comprehensive guide detailing best practices for securing Groq API keys and managing data privacy. It covers critical steps such as using environment variables, implementing secure key rotation procedures, preventing key leaks via pre-commit hooks, and defending against prompt injection attacks for robust application development.

This guide outlines best practices for securing PostHog API keys. It differentiates between low-risk Project keys and high-privilege Personal keys, detailing methods for implementing least-privilege access, scoped key creation, secure rotation procedures, and leak prevention using environment variables, pre-commit hooks, and server-side isolation.

Automates the steps for configuring pre-commit hooks, guiding through best practices, generating configs, and validating results for DevOps or version-control workflows.

A comprehensive guide to integrating Sentry into continuous integration and continuous deployment (CI/CD) pipelines (e.g., GitHub Actions, GitLab CI, CircleCI). This skill automates complex tasks such as creating releases, uploading source maps for readable stack traces, associating commits, and tracking deployment environments, ensuring rapid and accurate debugging of production errors.

A comprehensive guide to configuring and utilizing ShellCheck for static analysis of shell scripts (Bash, sh, POSIX). This tool detects common programming pitfalls, enforces best practices, and helps ensure script reliability and portability. Ideal for setting up linting in CI/CD pipelines, pre-commit hooks, or maintaining code quality standards across a development team.

This skill simulates an autonomous, overnight development cycle by leveraging Git hooks to enforce Test-Driven Development (TDD). It ensures that all code changes, whether building new features, refactoring, or fixing bugs, are rigorously tested and meet high quality standards before commitment. Use this when high code reliability and comprehensive testing are critical requirements.

Implement comprehensive guardrails for Vercel applications, covering the entire development lifecycle. This solution includes custom ESLint rules to prevent secret exposure, pre-commit hooks for credential scanning, and robust CI checks to validate vercel.json, ensure edge runtime compatibility, and monitor bundle size, guaranteeing high quality and secure deployments.

Guides the setup of a high-efficiency, AI-augmented local development loop. This skill integrates features like Cascade editing, in-IDE Previews, and Turbo mode command execution, enabling developers to quickly iterate, debug, and commit changes within a structured environment. Ideal for setting up new projects or optimizing existing development workflows.

This skill automates the entire software release workflow within Windsurf. It analyzes commit history based on conventional commits to determine the correct semantic version bump (major, minor, or patch). It then automatically generates comprehensive changelogs, manages Git tags, updates version files, and publishes the final release package to a registry. It is essential for teams implementing robust CI/CD practices.

Create a disciplined, developer-ready implementation plan whenever a multi-step spec arises; document every file, command, and bite-sized action with precise steps, tests, and commit guidance so any engineer can execute confidently with DRY/YAGNI/TDD practices.

This skill simulates a senior engineer's final, deep audit of an entire codebase before committing or pushing to a remote repository. It systematically checks for junk files, dead code, security vulnerabilities (secrets, injection flaws), and performance bottlenecks (N+1 queries). Use this pre-flight check before any major release or public deployment to ensure maximum code quality and production readiness.

A rigorous, security-focused code review process designed for Pull Requests (PRs), commits, and diffs. It moves beyond general reviews by focusing intensely on high-risk areas such as authentication, cryptography, external calls, and value transfer. The methodology is evidence-based, requiring detailed attack scenario modeling and generating comprehensive, auditable markdown reports to identify overlooked vulnerabilities and regressions.