Skill UI

This policy set establishes comprehensive guardrails for using AI coding assistants (like Windsurf/Cascade). It governs terminal commands, enforces workspace isolation (preventing access to secrets/credentials), and integrates CI/CD gates for code quality. Use this when setting up team development standards, mandatory code review policies for AI output, or implementing secure development pipelines.

A comprehensive, multi-phase checklist designed for the systematic rollout of AI coding assistants (like Windsurf) to development teams or entire enterprises. It covers critical areas including workspace configuration, security hardening (SSO/SAML, secret management), establishing team AI policies, structured developer onboarding, key performance indicator (KPI) monitoring, and emergency rollback procedures.

This guide outlines critical reliability patterns for integrating advanced AI coding assistants into professional development workflows. It emphasizes best practices such as mandatory Git checkpointing, utilizing dedicated feature branches, breaking large tasks into incremental steps, and implementing comprehensive validation gates (linting, testing). Use this when developing fault-tolerant, AI-assisted applications to prevent accidental code breaks and maintain project stability.

A comprehensive guide to establishing production-ready coding standards and context for the Windsurf AI environment. Learn how to utilize root-level rules (.windsurfrules), granular workspace rules, Model Context Protocol (MCP) server integration, and advanced prompt engineering to guide the AI and maintain consistent code quality across projects.

Provides comprehensive expertise for building robust WordPress sites. Specializing in custom theme and plugin development, implementing modern Gutenberg blocks, extending WooCommerce functionality, and managing the WordPress REST API. Core focus areas include advanced security hardening (nonces, sanitization, capability checks), performance optimization (caching, query tuning), and adhering strictly to WordPress coding standards.

Defines strict guidelines for creating and maintaining Excel financial models, covering zero formula errors, industry color coding, number formatting, documented assumptions, and mandatory use of Excel formulas to ensure accuracy and auditability before recalculation.

Audits GitHub Actions workflows that invoke AI coding agents to surface prompt injection and sandbox risks, tracing attacker-controlled inputs through env vars, reusable actions, and workflow references before deployment or code review.

PyHealth delivers a full-stack Python toolkit for building, evaluating, and deploying clinical machine learning models, covering EHR datasets, medical coding systems, physiological signals, and healthcare-tailored architectures such as RETAIN, SafeDrug, and Transformer-based pipelines.

A powerful tool to scaffold and ship production-ready Model Context Protocol (MCP) servers directly from OpenAPI specifications. It supports Python and TypeScript, ensuring schema validation, safe evolution, and robust tool definition generation, eliminating the need for manual wrapper coding. Use it to expose existing REST APIs to LLM agents or build shared tool integrations.

This skill is intended to analyze and improve the quality of codebases, ensuring adherence to best practices and coding standards. Note: This specific file is a translation placeholder, and the core functionality description should refer to the original skill file for details.

Creates detailed implementation plans for multi-step tasks by outlining file responsibilities, concrete coding/testing steps, and commit guidance so developers can execute with no prior context.

Performs static security analysis on GitHub Actions workflows that incorporate AI coding agents (e.g., Claude, Gemini, OpenAI). This skill helps identify critical data flow vulnerabilities, such as where attacker-controlled input can reach AI agent prompts or internal systems via CI/CD pipelines, going beyond simple expression checks.