Skill UI

This comprehensive playbook provides effective patterns and structured templates for managing on-call shift transitions. It guides engineers on documenting active incidents, ongoing investigations, recent system changes, and upcoming maintenance events. The goal is to ensure seamless context transfer, maintaining continuity and reliable incident response across different shifts.

This skill manages the integration of Model Context Protocol (MCP) servers with Windsurf, significantly extending its operational capabilities. It enables Windsurf to interact with external resources, including databases, file systems, APIs, and custom tools through a standardized protocol. Use this when configuring or utilizing advanced, external tool integrations within the Windsurf environment.

A powerful tool for architecting production-grade multi-agent workflows. It allows users to define complex, multi-step AI pipelines using structured patterns (sequential, parallel, hierarchical). Key features include defining explicit handoff contracts, implementing robust failure handling, and managing context/cost discipline across long-running processes, ensuring reliable and scalable AI system deployment.

This skill provides comprehensive methods for collecting and synthesizing Open-Source Intelligence (OSINT) regarding threat actors, malicious infrastructure, and attack campaigns. It utilizes public data sources, passive reconnaissance tools (like WHOIS, Certificate Transparency), and specialized platforms (Maltego, Shodan, SpiderFoot) to map adversary context and perform pre-engagement intelligence gathering for authorized red team assessments. Emphasis is placed on passive collection techniques to ensure legality and operational security.

This skill provides a comprehensive guide to implementing microsegmentation policies. It details how to move beyond traditional network boundaries (VLANs) to enforce least-privilege access control between individual workloads using identity and application context. Essential for preventing lateral movement and establishing a robust zero-trust architecture aligned with industry compliance standards.

A comprehensive guide to implementing Google's BeyondCorp zero trust access model. This solution enforces identity- and device-aware access control using Cloud IAP and Access Context Manager, effectively replacing traditional VPN infrastructure. Use this to secure remote and hybrid access to GCP-hosted or on-prem applications by requiring granular device posture checks and strong user authentication.

This skill guides the implementation of continuous, risk-adaptive identity verification crucial for Zero Trust Architecture (ZTA). It covers deploying phishing-resistant MFA (FIDO2/WebAuthn), advanced risk-based conditional access policies, and identity governance strategies. Users learn how to move beyond traditional credentials by leveraging multiple signals—such as device posture, behavioral biometrics, and location context—to dynamically assess and enforce trust levels before granting access.

This guide details implementing Zero Trust Network Access (ZTNA) across major cloud providers (AWS, Azure, GCP). It replaces traditional VPNs by enforcing identity-based, context-aware access controls using identity-aware proxies and micro-segmentation. Use it to secure cloud workloads, limit lateral movement, and comply with modern security standards like BeyondCorp.

This skill guides the end-to-end deployment of Zero Trust Network Access (ZTNA) using Zscaler Private Access (ZPA). It enables secure, granular, and context-aware access to internal applications without placing users on the corporate network. Ideal for hybrid and remote workforces needing robust security controls and regulatory compliance beyond traditional VPN limitations.

Provides a comprehensive guide to implementing the Zero Trust security model using Google BeyondCorp Enterprise. It configures the Identity-Aware Proxy (IAP) to enforce access decisions based on granular context (user identity, device posture, network attributes), moving away from traditional network perimeters. Ideal for securing sensitive GCP resources and meeting compliance requirements.

This skill provides comprehensive methods for securing Helm chart deployments on Kubernetes. It covers validating chart provenance through signature verification, scanning templates for misconfigurations (using tools like kubesec and checkov), enforcing strict pod/container security contexts, managing secrets via external stores, and implementing precise RBAC controls within CI/CD pipelines. Ideal for compliance and robust security architecture.

This skill facilitates a rigorous, documentation-anchored design review session. It challenges a proposed plan by cross-referencing it against the project's established domain glossary (CONTEXT.md), historical architectural decisions (ADRs), and the current codebase. It forces the user to resolve ambiguities, define precise terminology, and validate design trade-offs using concrete scenarios, ensuring all decisions are captured and documented inline.