Skill UI

This skill provides comprehensive guidance and tools for end-to-end software release management. It automates critical tasks such as generating changelogs from conventional commits, determining semantic version bumps (Major/Minor/Patch), assessing release readiness, and planning complex deployment workflows (e.g., Git Flow). Ideal for teams adopting robust DevOps practices.

This skill provides a comprehensive suite for executing load testing, stress testing, and performance benchmarking. Use it to simulate peak traffic, identify system bottlenecks, and verify compliance with Service Level Agreements (SLAs). It supports industry-standard tools like k6, Artillery, Locust, and JMeter for robust performance analysis.

A structured workflow designed to prevent 'reinventing the wheel.' Before writing custom code, this skill guides the user through analyzing needs, conducting parallel searches across multiple channels (npm, PyPI, GitHub, MCP), evaluating candidate solutions based on maintainability and community support, and making a decision (Adopt, Extend, or Custom Build). It ensures that solutions leverage existing, proven libraries and patterns.

A structured framework for managing production outages using Sentry. This guide walks users through classifying incident severity (P0-P3), performing deep triage using stack traces and breadcrumbs, and executing API-based queries to pinpoint root causes and measure impact. Essential for DevOps and SRE teams during critical incident response.

Master systematic methodologies for using Shodan to perform deep reconnaissance during penetration testing. This skill covers querying exposed services, mapping assets, identifying vulnerable systems (CVEs), and utilizing advanced filters for IP ranges, geographical locations, and organizational data. Ideal for security researchers and ethical hackers.

This comprehensive checklist guides the secure deployment and hardening of a Supabase project for production use. It covers critical security measures such as enforcing Row Level Security (RLS), separating client and service keys, optimizing connection pooling via Supavisor, setting up Point-in-Time Recovery (PITR) backups, and configuring network restrictions. Use this guide before launching or for conducting security audits to ensure maximum stability and security.

Expert in implementing Infrastructure as Code (IaC) using Terraform across multi-cloud environments, including AWS, Azure, and GCP. Specializes in creating reusable, modular components, advanced state management (backends, locking, migrations), ensuring security best practices, and developing robust, production-grade cloud infrastructure pipelines.

This skill maps identified security threats to appropriate controls and mitigation strategies. It is essential for prioritizing security investments, building comprehensive remediation roadmaps, validating existing control coverage, and performing detailed risk treatment planning. It helps organizations design robust, defense-in-depth security architectures.

This guide provides comprehensive methods for load testing and capacity planning of Vercel serverless deployments. Learn how to use professional tools like k6 and autocannon to simulate realistic traffic spikes, measure latency (P95, P99), analyze cold start impact, and tune concurrency settings (Fluid Compute) to ensure optimal application performance and scalability under heavy load.

This skill manages the integration of Model Context Protocol (MCP) servers with Windsurf, significantly extending its operational capabilities. It enables Windsurf to interact with external resources, including databases, file systems, APIs, and custom tools through a standardized protocol. Use this when configuring or utilizing advanced, external tool integrations within the Windsurf environment.

A powerful tool for architecting production-grade multi-agent workflows. It allows users to define complex, multi-step AI pipelines using structured patterns (sequential, parallel, hierarchical). Key features include defining explicit handoff contracts, implementing robust failure handling, and managing context/cost discipline across long-running processes, ensuring reliable and scalable AI system deployment.

A comprehensive guide for managing secrets and environment variables throughout the entire development lifecycle, from local development to production. This skill covers secret leak auditing (detecting committed credentials), implementing robust rotation workflows, and integrating with industry-leading secret stores like HashiCorp Vault, AWS Secrets Manager, and Azure Key Vault. Essential for hardening CI/CD pipelines and ensuring compliance.