Skill UI

This skill provides comprehensive dependency management for software projects. It analyzes the entire dependency tree to identify security vulnerabilities, suggest safe updates, and help plan major version migration paths. Use this when performing security audits, managing third-party library updates, or planning complex project upgrades.

This skill automates the entire software release workflow within Windsurf. It analyzes commit history based on conventional commits to determine the correct semantic version bump (major, minor, or patch). It then automatically generates comprehensive changelogs, manages Git tags, updates version files, and publishes the final release package to a registry. It is essential for teams implementing robust CI/CD practices.

A specialized assistant designed to act as a senior software architect. It critiques code generated by AI tools or rapidly prototyped code, moving beyond simple syntax checks. The auditor identifies deep structural flaws, technical debt, architectural weaknesses, and production risks (e.g., security vulnerabilities, poor error handling, tight coupling) that make code fragile or unsuitable for deployment.

Apify Actorization is a process that transforms existing, standalone software or scripts (like CLI tools) into standardized, reusable serverless applications called Actors. Actors are packaged as Docker images, accepting structured JSON inputs and producing structured JSON outputs. This skill guides developers on migrating projects to the Apify platform, ensuring compatibility, and enabling scalable, event-driven data processing pipelines.

This comprehensive guide outlines a rigorous, human-in-the-loop engineering workflow for leveraging advanced AI agents to complete complex implementation tasks. It mandates defining clear completion criteria, decomposing work into manageable units, and strategically routing models (Haiku, Sonnet, Opus) based on task complexity. The workflow emphasizes continuous evaluation, regression testing, security review of invariants and edge cases, and strict cost discipline to ensure robust and reliable software development using AI assistance.

This comprehensive skill guides users through the entire debugging lifecycle, from reproducing elusive bugs to tracing the root cause, implementing permanent fixes, and preventing future regressions. It covers advanced techniques like binary search, time travel debugging, and handling common patterns such as race conditions and null values, ensuring professional and systematic troubleshooting for any production issue.

Leverages Monte Carlo-based simulation to spot potential software vulnerabilities by feeding randomized inputs into modules, tracking failure likelihoods, and highlighting risky code paths for security testing.

A comprehensive engineering stack for designing and implementing robust, production-grade payment gateways for Software-as-a-Service (SaaS) platforms targeting the Pakistani market. It covers integrating major local providers like JazzCash and Easypaisa, handling complex payment flows (PKR billing, webhooks, idempotency), and performing essential financial reconciliation and auditing processes. This guide ensures high correctness and reliability in B2B/SaaS billing operations in Pakistan.

A comprehensive guide to integrating privacy protections into software architecture from the ground up. This skill ensures compliance with major global regulations like GDPR, CCPA, and LGPD by implementing core principles such as data minimization, purpose limitation, and default privacy settings. Essential for developers building any application that handles personal user data.

A specialized tool and workflow for investigating supply chain attacks. It helps security analysts analyze compromised software updates, trojanized binaries, and dependency artifacts by comparing legitimate versions against suspect files. Key functions include binary diffing, identifying injected code, and documenting code signing anomalies to determine the scope of a security breach.

This comprehensive forensic workflow guides investigators through the extraction and detailed analysis of Windows Registry hives (SAM, SYSTEM, SOFTWARE, etc.). It is used during incident response to uncover critical artifacts, including user activity history, malware persistence mechanisms (autorun keys), installed software records, and evidence of system compromise.

Learn how to implement robust container security by integrating the open-source Trivy scanner (from Aqua Security) into your CI/CD pipelines. This guide covers scanning container images, Kubernetes manifests, IaC files, and code repositories to detect critical vulnerabilities, misconfigurations, secrets, and generating Software Bill of Materials (SBOM) for comprehensive supply chain security.