Skill UI

A comprehensive, phased guide detailing how to migrate your code review process to CodeRabbit. It covers the entire journey, from assessing current tools (like SonarCloud, DeepSource, or manual reviews) and mapping existing rules, through to running a parallel pilot phase and finally achieving full adoption. Ideal for engineering managers or DevOps teams planning a major CI/CD tool transition.

This skill implements a sophisticated, config-driven rules engine for OpenRouter API calls. It dynamically determines the optimal large language model (LLM) by evaluating a comprehensive context, including user subscription tier, remaining cost budget, specific task type (code, chat), required tools, and latency requirements. This is essential for building production-grade, cost-aware, and robust LLM orchestration systems.

Ensures database integrity via the data-validation-engine plugin by automatically enforcing data types, ranges, formats, referential integrity, and business rules whenever validation or database integrity requests arise across multi-database environments.

Vercel Engineering’s authoritative React and Next.js performance guide, offering prioritized rules for waterfalls, bundle size, data fetching, memoization, rendering, caching, and advanced patterns.

A comprehensive guide to establishing production-ready coding standards and context for the Windsurf AI environment. Learn how to utilize root-level rules (.windsurfrules), granular workspace rules, Model Context Protocol (MCP) server integration, and advanced prompt engineering to guide the AI and maintain consistent code quality across projects.

This skill parses various cyber threat intelligence (CTI) reports (Mandiant, CrowdStrike, etc.) using NLP and specialized libraries (stix2, mitreattack-python, spaCy). It systematically extracts adversary behaviors, maps them to MITRE ATT&CK IDs, and constructs a searchable STIX 2.1 Attack Pattern library. This is essential for threat-informed detection engineering, generating detection rules (Sigma, YARA), and validating security controls.

This skill provides a comprehensive workflow for building vendor-agnostic detection rules using the Sigma format. It empowers security operations center (SOC) engineers to translate raw threat intelligence and MITRE ATT&CK techniques into standardized, portable detection logic. The process guides users through rule validation and conversion into specific queries for major SIEM platforms, including Splunk, Elastic, and Microsoft Sentinel, ensuring robust detection coverage.

This skill provides comprehensive guidelines for detecting Business Email Compromise (BEC), a sophisticated fraud scheme. It covers detection techniques using email gateway rules, behavioral analytics, and robust financial process controls. Learn to identify red flags like unusual payment requests, domain mismatches, and patterns of social engineering to protect against financial loss.

A comprehensive guide and framework for detecting attacker lateral movement within enterprise networks. It details the use of network flow analysis (Zeek), authentication log review (Windows Event Logs, Kerberos), and dedicated SIEM correlation rules (Splunk, Elastic) to identify techniques like Pass-the-Hash and RDP hopping. Ideal for threat hunters and security engineers building detection pipelines.

This guide details a threat hunting technique for detecting persistence mechanisms utilizing Windows Registry Run keys (T1547.001). By analyzing Sysmon Event ID 13 logs, it identifies suspicious auto-start entries pointing to temporary directories, encoded PowerShell commands, or abused LOLBins. Essential for SOC analysts and security engineers investigating incidents and developing robust detection rules.

Generates implementation-ready JSON-LD schema markup for 10 types (e.g., FAQPage, Product, Article). It validates all fields against Google rich result eligibility rules, flags missing data with fix instructions, and provides clean, ready-to-paste script blocks to optimize search engine visibility and achieve rich results.

This skill generates expert, implementation-ready design system guidelines based on the Brutalism aesthetic. It covers foundational elements like color, typography, and spacing, while enforcing rigorous rules for accessibility (WCAG 2.2 AA) and component consistency, providing actionable standards for engineers and designers.