Skill UI

A comprehensive guide to securing development workspaces using Windsurf. This skill teaches how to apply best practices for workspace isolation, prevent sensitive data (secrets, PII) from leaking into AI indexes, manage telemetry, and ensure compliance by configuring exclusion files and security rules.

This skill automates the setup of Windsurf development workspaces. It handles AI rule initialization (.windsurfrules), configuring editor settings, establishing cross-editor consistency, and defining team standards for complex multi-root monorepos. Use this skill when starting a new Windsurf project or migrating an existing one to ensure standardized development practices.

This skill provides complete, programmatic integration with the protocols.io API v3, enabling advanced management of scientific protocols. Use it for the entire protocol lifecycle, including discovery by DOI or keywords, creating new protocols, managing steps and materials, coordinating collaborative development, organizing workspaces, and tracking experiments. It covers authentication, file handling, and discussion management, making it ideal for automated lab workflows and scientific documentation systems.

This skill automates the creation of isolated, pre-configured development containers (devcontainers). It scans the project structure to detect supported languages (Python, Node.js, Rust, Go) and intelligently generates the necessary configuration files, VS Code extensions, and setup scripts. It ensures all required tools are installed in a sandboxed environment, making it ideal for starting new multi-language projects or needing consistent, reproducible development workspaces.

A comprehensive guide for threat hunters and incident responders to detect WMI-based persistence mechanisms (MITRE T1546.003). It details the analysis of Sysmon Event IDs 19, 20, and 21, cross-referencing these events with root\subscription namespaces and using tools like Autoruns and SIEM analysis for robust detection.

This skill guides the implementation and auditing of advanced container network policies using Calico's specialized CRDs (like GlobalNetworkPolicy and NetworkSet). It enables granular traffic control, zero-trust architectures, and advanced egress filtering based on domain names, which are critical for maintaining strict compliance and isolating workloads across multiple namespaces.

A comprehensive guide detailing how to implement portable Kubernetes NetworkPolicies to enforce zero-trust microsegmentation. Learn to apply default-deny rules, control ingress and egress traffic, and restrict lateral movement between pods and namespaces across various CNI platforms (Calico, Cilium). Ideal for establishing robust security posture and meeting compliance requirements.

Implement Kubernetes RBAC to enforce least-privilege access across namespaces, covering Role/ClusterRole design, binding configuration, service account hardening, OIDC integration, and audit logging for multi-tenant clusters.

This tool audits Kubernetes pod configurations to detect potential container escape misconfigurations. It checks for dangerous settings like privileged flags, excessive capabilities, host path mounts, shared namespaces, and cgroup abuses. Use it for comprehensive security assessments, compliance checking, or generating pre-enforcement security posture reports.

A comprehensive guide detailing best practices for executing commands on Windows using PowerShell and CMD. It addresses critical pitfalls such as handling spaces in file paths, ensuring correct character encoding (UTF-8), using native cmdlets, and managing long path limits. Essential for developers building robust, cross-platform Windows automation scripts.

Copilot Spaces allow users to consolidate and manage project-specific knowledge, including documentation, code snippets, architectural standards, and operational instructions. By loading a Space, Copilot grounds its responses not just on general knowledge, but on the curated, authoritative context of the entire project, enabling accurate Q&A, code generation, and workflow execution based on team standards. Ideal for onboarding, large-scale projects, and maintaining consistency.

This expert system generates a comprehensive and best-practice-oriented .editorconfig file. It analyzes the project structure and user preferences to enforce coding style consistency (e.g., spaces vs. tabs, indentation size, line endings, trailing whitespace) across diverse IDEs and text editors. Essential for maintaining clean, standardized code across development teams and version control systems.