Skill UI

A comprehensive guide for implementing secure and reliable webhook endpoints to handle Vercel deployment lifecycle events. This skill covers signature verification (HMAC) to ensure security, processing key events (e.g., deployment.ready, deployment.error), and implementing idempotency to prevent duplicate actions. Ideal for building automated CI/CD integrations, status notifications, or custom project hooks that react to deployment changes in real-time.

This skill guides the integration of Windsurf workflows into CI/CD pipelines (like GitHub Actions). It provides comprehensive mechanisms for validating configuration files and enforcing AI code quality standards. Use it to automate policy checks, detect hardcoded secrets, ensure sufficient test coverage for new files, and manage complex config deployments across repositories, ensuring highly reliable and compliant code merges.

This skill provides AI-assisted capabilities for creating and managing Continuous Integration/Continuous Deployment (CI/CD) workflows using GitHub Actions. It can generate new workflows from project requirements, optimize existing pipelines, debug failures, and implement industry-standard security best practices, streamlining the entire development and deployment process.

Integrates Windsurf's native deployment features and Cascade workflows to automate the entire build, test, and deployment cycle. Supports major platforms like Netlify, Vercel, AWS, and Google Cloud Run, enabling users to manage the full CI/CD pipeline, including preview deployments and rollbacks, directly within the IDE.

This policy set establishes comprehensive guardrails for using AI coding assistants (like Windsurf/Cascade). It governs terminal commands, enforces workspace isolation (preventing access to secrets/credentials), and integrates CI/CD gates for code quality. Use this when setting up team development standards, mandatory code review policies for AI output, or implementing secure development pipelines.

This skill automates the entire software release workflow within Windsurf. It analyzes commit history based on conventional commits to determine the correct semantic version bump (major, minor, or patch). It then automatically generates comprehensive changelogs, manages Git tags, updates version files, and publishes the final release package to a registry. It is essential for teams implementing robust CI/CD practices.

Provides Wycheproof test vectors for validating cryptographic implementations against known attacks and edge cases, making it ideal for CI regression sweeps and third-party crypto audits.

Automated guidance for YAML configuration validation tasks within the DevOps Basics domain, covering version control, containers, CI/CD, and infrastructure fundamentals while producing production-ready code and configurations.

Automatically monitors YAML workflows to validate syntax, infer schemas, convert formats, and harden Kubernetes/Docker Compose/CI configurations while spotting anti-patterns and security gaps.

Audits GitHub Actions workflows that invoke AI coding agents to surface prompt injection and sandbox risks, tracing attacker-controlled inputs through env vars, reusable actions, and workflow references before deployment or code review.

A comprehensive guide covering patterns and architectures for automating code execution using LLMs. It spans simple sequential pipelines (e.g., daily dev scripts) to advanced, RFC-driven multi-agent Directed Acyclic Graph (DAG) orchestration. Ideal for building CI/CD style continuous development pipelines, managing complex state, and automating quality gates without human intervention.

Performs static security analysis on GitHub Actions workflows that incorporate AI coding agents (e.g., Claude, Gemini, OpenAI). This skill helps identify critical data flow vulnerabilities, such as where attacker-controlled input can reach AI agent prompts or internal systems via CI/CD pipelines, going beyond simple expression checks.