Skill UI

This skill provides expert-level diagnostic capabilities for complex distributed systems. It specializes in analyzing production incidents, identifying deep root causes, and designing comprehensive observability solutions. Use this when investigating recurring errors, reviewing system logs/traces, and implementing preventative reliability measures.

This comprehensive playbook provides effective patterns and structured templates for managing on-call shift transitions. It guides engineers on documenting active incidents, ongoing investigations, recent system changes, and upcoming maintenance events. The goal is to ensure seamless context transfer, maintaining continuity and reliable incident response across different shifts.

Monitor the operational health of PostHog integrations by tracking critical metrics. This skill checks event ingestion rates, feature flag evaluation latency, and monitors billing volume consumption. It also provides rules for Prometheus/Grafana alerting, ensuring data pipelines remain stable and alerting on potential performance bottlenecks or exceeding API limits.

A structured workflow designed to prevent 'reinventing the wheel.' Before writing custom code, this skill guides the user through analyzing needs, conducting parallel searches across multiple channels (npm, PyPI, GitHub, MCP), evaluating candidate solutions based on maintainability and community support, and making a decision (Adopt, Extend, or Custom Build). It ensures that solutions leverage existing, proven libraries and patterns.

This skill enables comprehensive audit logging for Windsurf Enterprise deployments. It covers tracking of AI interactions, file access events, authentication changes, and overall configuration modifications. It is essential for maintaining strict compliance standards and performing detailed security audits, particularly when the user mentions audit or compliance keywords.

This specialized skill acts as an expert AI auditor for Food Safety Modernization Act (FSMA) compliance. It is designed to review critical records, including HACCP plans, Preventive Controls, and Supply Chain documentation for food processing facilities. Use it to simulate FDA inspections, identify compliance gaps (such as missing CCPs or inadequate corrective actions), and receive actionable guidance to ensure the highest standards of food safety.

This module is designed to document, track, and manage quality nonconformance issues found during manufacturing or process audits. It is essential for root cause analysis, implementing corrective and preventive actions (CAPA), and ensuring compliance with industry quality standards. Use it when recording deviations from specified requirements.

This skill provides a comprehensive workflow for identifying, unpacking, and analyzing packed malware samples, especially those utilizing the UPX format. It details methods for standard UPX decompression and advanced techniques for repairing modified PE headers or magic bytes that prevent automated extraction. The process supports preparing samples for deep static analysis and dynamic debugging.

A comprehensive guide utilizing Splunk Enterprise Security and SPL to conduct deep forensic analysis of security incidents. This skill covers correlating disparate sources like Windows event logs, firewall records, proxy data, and Sysmon logs to detect TTPs, reconstruct timelines, and identify anomalies, making it essential for incident response and threat hunting.

A comprehensive skill for optimizing Role-Based Access Control (RBAC) structures. It applies advanced data mining techniques, including clustering (k-means, agglomerative) and Formal Concept Analysis (FCA), to analyze existing user-permission assignments. The goal is to discover the minimal set of necessary roles, thereby preventing 'role explosion,' enforcing the least privilege principle, and ensuring robust identity governance for secure systems.

This comprehensive guide outlines how to plan and execute a full-scope red team engagement. It simulates real-world Advanced Persistent Threat (APT) behavior, covering the entire cyber kill chain from initial reconnaissance (OSINT) through lateral movement, credential harvesting, and data exfiltration. It utilizes MITRE ATT&CK frameworks to rigorously test an organization's detection, prevention, and incident response capabilities.

This guide details the process of configuring microsegmentation policies to enforce least-privilege access between workloads. It covers the entire workflow, from application dependency mapping and discovery (Phase 1) to defining label-based, default-deny security zones (Phase 2). It is crucial for preventing lateral movement in highly secure, zero-trust architectures using tools like VMware NSX, Illumio, and Calico.