Skill UI

A comprehensive, multi-phase checklist designed for the systematic rollout of AI coding assistants (like Windsurf) to development teams or entire enterprises. It covers critical areas including workspace configuration, security hardening (SSO/SAML, secret management), establishing team AI policies, structured developer onboarding, key performance indicator (KPI) monitoring, and emergency rollback procedures.

This guide outlines the Windsurf reference architecture, providing an optimal project structure for development, configuration, and AI context management. It covers rules hierarchy, workflow organization, monorepo strategies, and context pinning to maximize the effectiveness of AI assistants and development tools.

This skill provides centralized management for organization-wide Windsurf settings, including editor preferences, AI behavioral policies, tool approvals, and compliance requirements. It is essential for administrators who need to standardize configurations, manage global team policies, and ensure organizational compliance across multiple teams within an enterprise setting.

A comprehensive skill for advanced text and typography handling within the Makepad framework. It provides robust mechanisms for font configuration, text layout management (Layouter), and high-quality GPU-based text rendering using Signed Distance Fields (SDF). Use this skill when needing to implement rich text displays, manage complex font styles, or ensure crisp, scalable typography across different resolutions.

A comprehensive guide covering texture management in Three.js. Learn how to load various texture types (regular, data, video, KTX2), configure critical properties like UV mapping, color space, wrapping modes, filtering, and mipmapping. Includes advanced workflows for generating and utilizing cubemaps and HDR environment maps.

Guides security architects through designing and deploying a continuous CSPM program across AWS, Azure, and GCP, covering tool selection, policy baselines, automation, and SOC integration to monitor misconfigurations and prioritize remediation.

This guide details the deployment and configuration of MISP (Malware Information Sharing Platform) using Docker. It demonstrates how to aggregate, correlate, and distribute threat intelligence from diverse sources like abuse.ch and AlienVault OTX. Learn automated feed synchronization, STIX/TAXII integration, and connecting the platform to SIEM and SOAR tools like Splunk and Elasticsearch for centralized IOC management.

This skill guides the configuration and usage of Hardware Security Modules (HSMs) for robust cryptographic key management. Utilizing the industry-standard PKCS#11 interface, it covers key generation, signing, encryption, and key management directly on hardened physical or soft devices. It is essential for applications requiring the highest level of key protection, ensuring that private keys never leave the secure hardware boundary.

This skill audits Azure Blob and ADLS storage accounts for critical security misconfigurations. It checks for public access exposure, weak or long-lived SAS tokens, missing encryption at rest, and outdated TLS versions. Using the Python SDK, it generates a detailed, risk-scored report to enhance cloud security posture management and detect potential data exposure risks.

A comprehensive guide to continuously monitoring multi-cloud environments (AWS, Azure, GCP) for security misconfigurations, compliance violations, and risk drift. This solution leverages industry tools like Prowler and ScoutSuite to enforce compliance standards (CIS, SOC 2, PCI DSS) across heterogeneous cloud infrastructures, providing deep visibility into security gaps and automating remediation workflows.

This skill implements Cloud Security Posture Management (CSPM) across multi-cloud environments. It detects critical cloud-native misconfigurations, such as over-permissive IAM roles, exposed storage buckets, and unencrypted data, using industry-leading tools like AWS Security Hub, Azure Defender for Cloud, Prowler, and ScoutSuite. Use this when conducting comprehensive audits of complex, multi-cloud infrastructures for compliance or building consolidated security posture reports.

This tool implements critical NERC CIP controls for Bulk Electric System (BES) cyber systems, covering asset categorization (CIP-002), electronic security perimeters (CIP-005), system security management (CIP-007), configuration management (CIP-010), and supply chain risk (CIP-013). It is essential for maintaining compliance, preparing for audits, and commissioning new BES assets.