Skill UI

This skill guides the development of custom extensions for the Windsurf environment, leveraging the full VS Code Extension API. You will learn to track various workspace events—such as file saves, editor changes, and terminal outputs—and integrate this data with external services by sending structured webhooks. This is essential for building complex workflow automation, implementing custom IDE features, or creating data analytics tools within the development lifecycle.

Expert skill for building modern, production-ready Chrome Extensions using Manifest V3 standards. Covers advanced topics including service worker management, content script injection, secure cross-context communication (message passing), and implementing best practices like `declarativeNetRequest` and secure storage APIs.

This skill automates the creation of isolated, pre-configured development containers (devcontainers). It scans the project structure to detect supported languages (Python, Node.js, Rust, Go) and intelligently generates the necessary configuration files, VS Code extensions, and setup scripts. It ensures all required tools are installed in a sandboxed environment, making it ideal for starting new multi-language projects or needing consistent, reproducible development workspaces.

Analyze existing XML sitemaps or generate new ones from industry templates. Validates XML format, URL limits, lastmod accuracy, and image/video/news extensions, then outputs reports or sitemap files.

This guide provides a comprehensive methodology for identifying and exploiting Insecure Direct Object Reference (IDOR) vulnerabilities in web applications and APIs. It teaches testers how to systematically manipulate object identifiers (such as numerical IDs, UUIDs, or slugs) within API requests and URLs. Techniques involve using advanced tools like Burp Suite's Authorize extension to test object-level access control, validating both horizontal (same privilege) and vertical (different privilege) access restrictions during authorized penetration tests or bug bounty engagements.

A comprehensive guide and workflow for digital forensic investigators to analyze ransomware artifacts. This process involves preserving volatile evidence (memory dumps), identifying the ransomware variant from file extensions and ransom notes, establishing the attack timeline using Prefetch and Event Logs, and extracting critical Indicators of Compromise (IoCs) such as Bitcoin addresses and Tor sites. Essential for incident response and recovery planning.

This skill acts as an advanced extension layer, implementing a self-evolution protocol, maintaining session state continuity (Compaction), and providing KPI-style performance summaries. It allows users to simulate continuous professional development, track metrics, and master complex role-playing and interaction skills across multiple sessions, ensuring performance baselines are continuously adjusted and internalized.

Provides comprehensive command-line management for all Azure DevOps resources. Users can manage projects, repositories, CI/CD pipelines, pull requests, work items, and artifacts using the Azure CLI with the dedicated extension. This tool is essential for automation scripting, integration testing, and streamlining complete DevOps workflows.

Generates and edits draw.io (.drawio/.drawio.svg/.drawio.png) files via mxGraph XML, supporting templates, layout guidance, and the VS Code Draw.io extension so diagrams for flowcharts, architecture, UML, ER, sequences, and networks open without manual fixes.

Analyzes PostgreSQL snippets or entire projects to flag anti-patterns, enforce best practices, optimize JSONB/array usage, schema design, custom types, triggers, extensions, and security policies like RLS.

Assistant for PostgreSQL developers that highlights native features, advanced data types, performance tuning patterns, and extension usage to optimize queries, indexes, and analytics in PostgreSQL projects.

This skill provides comprehensive guidelines for contributing and managing commands within VS Code extensions. It covers crucial best practices, including naming conventions, defining visibility (e.g., Command Palette vs. Side Bar), and structuring commands for optimal user experience. Use this when adding, updating, or understanding the architectural requirements for extension commands.