Skill UI

This skill facilitates the rapid and standardized onboarding of new projects onto the Windsurf platform. It optimizes the development environment by configuring the Cascade AI agent, establishing necessary project rules (.windsurfrules), setting team context defaults, and ensuring best practices for AI-assisted coding. Use this when initiating a new project or integrating a team to maximize AI efficiency.

This guide outlines critical reliability patterns for integrating advanced AI coding assistants into professional development workflows. It emphasizes best practices such as mandatory Git checkpointing, utilizing dedicated feature branches, breaking large tasks into incremental steps, and implementing comprehensive validation gates (linting, testing). Use this when developing fault-tolerant, AI-assisted applications to prevent accidental code breaks and maintain project stability.

Varlock provides secure, default environment variable management, ensuring that sensitive secrets (like API keys and passwords) are never exposed in logs, terminal output, or the AI context. It validates environments, reads schemas, and executes commands in a secure manner, promoting best practices for handling secrets in modern development workflows.

A comprehensive guide for validating and generating correct hreflang tags for multi-language and multi-region websites. It covers critical SEO checks, including self-referencing tags, bi-directional return tags, x-default setup, and proper language/region code validation (ISO standards). Learn how to implement hreflang via HTML, HTTP headers, and scalable XML sitemaps.

A comprehensive guide to integrating privacy protections into software architecture from the ground up. This skill ensures compliance with major global regulations like GDPR, CCPA, and LGPD by implementing core principles such as data minimization, purpose limitation, and default privacy settings. Essential for developers building any application that handles personal user data.

A specialized threat hunting skill designed to detect remnants of the PowerShell Empire post-exploitation framework. It analyzes Windows event logs (specifically Script Block and Module Logging) for key Indicators of Compromise (IOCs), such as default launcher strings, Base64 encoded payloads, known module signatures (e.g., Mimikatz), and staging URL patterns. The output provides a detailed JSON report, comprehensive timeline, and MITRE ATT&CK mapping for incident response and security validation.

This skill autonomously improves generated academic papers by simulating a multi-round review, fixing, and recompilation cycle. It is designed to enhance writing quality, fix theoretical inconsistencies, and improve presentation structure after the initial drafting phase. It operates in rounds (default 2 rounds) using external LLM review and can optionally accept a style reference paper to guide structural fixes.

This guide details the process of configuring microsegmentation policies to enforce least-privilege access between workloads. It covers the entire workflow, from application dependency mapping and discovery (Phase 1) to defining label-based, default-deny security zones (Phase 2). It is crucial for preventing lateral movement in highly secure, zero-trust architectures using tools like VMware NSX, Illumio, and Calico.

This skill guides threat hunters in detecting Cobalt Strike Command and Control (C2) beacons. It utilizes advanced network forensic techniques, including analyzing default TLS certificate serials, JA3/JA3S/JARM fingerprints, beacon jitter, and HTTP profile matching. Detection is achieved by correlating data from Zeek logs, Suricata rules, and Python PCAP analysis to identify suspicious outbound communications.

This guide details how to use Kubernetes NetworkPolicies to enforce granular, pod-level network segmentation. It covers establishing default deny rules, defining specific ingress and egress rules for services, and implementing zero-trust microsegmentation. Use this skill to build robust security architecture and prevent lateral movement within a container cluster.

HashiCorp Boundary is an identity-aware proxy that establishes secure, zero-trust access to infrastructure resources, eliminating the need for traditional VPNs. It enforces a default-deny model and integrates with HashiCorp Vault to dynamically broker credentials. This ensures just-in-time, least-privilege access, automatic credential revocation, and comprehensive session recording for strict compliance and auditing.

A comprehensive guide detailing Next.js 16+ usage with Turbopack. Turbopack, written in Rust, is an incremental bundler designed to drastically speed up development startup and Hot Module Replacement (HMR) by utilizing file system caching. This document guides developers on best practices, differentiating between the default Turbopack usage and when to revert to Webpack for debugging or compatibility.