Skill UI

This skill automates the entire software release workflow within Windsurf. It analyzes commit history based on conventional commits to determine the correct semantic version bump (major, minor, or patch). It then automatically generates comprehensive changelogs, manages Git tags, updates version files, and publishes the final release package to a registry. It is essential for teams implementing robust CI/CD practices.

Create a disciplined, developer-ready implementation plan whenever a multi-step spec arises; document every file, command, and bite-sized action with precise steps, tests, and commit guidance so any engineer can execute confidently with DRY/YAGNI/TDD practices.

A comprehensive guide for managing secrets and environment variables throughout the entire development lifecycle, from local development to production. This skill covers secret leak auditing (detecting committed credentials), implementing robust rotation workflows, and integrating with industry-leading secret stores like HashiCorp Vault, AWS Secrets Manager, and Azure Key Vault. Essential for hardening CI/CD pipelines and ensuring compliance.

Structured system that runs multi-branch “what if” analyses to map possibility spaces, stress-test strategic options, and surface triggers so users can prepare confident responses before committing resources.

This framework guides users through a pre-mortem analysis, systematically imagining a plan has failed and working backward to identify critical weaknesses. It surfaces underlying assumptions, dependencies, and potential failure points. Ideal for teams before committing significant resources, presenting to investors, or operating under high pressure.

This skill simulates a senior engineer's final, deep audit of an entire codebase before committing or pushing to a remote repository. It systematically checks for junk files, dead code, security vulnerabilities (secrets, injection flaws), and performance bottlenecks (N+1 queries). Use this pre-flight check before any major release or public deployment to ensure maximum code quality and production readiness.

A rigorous, security-focused code review process designed for Pull Requests (PRs), commits, and diffs. It moves beyond general reviews by focusing intensely on high-risk areas such as authentication, cryptography, external calls, and value transfer. The methodology is evidence-based, requiring detailed attack scenario modeling and generating comprehensive, auditable markdown reports to identify overlooked vulnerabilities and regressions.

The /hub:status command provides a comprehensive overview of an AgentHub session. It displays the current state of agent branches, commit counts, frontier status, and recent board updates. This is useful for monitoring ongoing collaborative AI tasks, allowing users to track progress and identify which agents are active or have completed their tasks.

This skill guides users on setting up automated code quality gates directly at the Git level. It covers best practices using frameworks like Husky, lint-staged, and pre-commit. Users can enforce linting, formatting, type-checking, and standardized commit message conventions (e.g., Conventional Commits) before code is committed or pushed, significantly improving code hygiene and development workflow consistency.

A comprehensive framework for applying the six core principles of ethical persuasion (Reciprocity, Commitment, Social Proof, Authority, Liking, Scarcity) to optimize product design, marketing copy, and sales flows. It helps users understand human behavioral heuristics to create genuinely compelling and ethical user experiences, increasing engagement and conversion rates.

A structured methodology for de-risking product ideas and validating market opportunities. This framework guides teams through defining measurable outcomes, building Opportunity Solution Trees (OST), mapping critical assumptions (Desirability, Viability, Feasibility), and planning rigorous experiments (prototyping, interviews, usability tests) before committing to full development resources. Ideal for discovery sprints and pre-build validation.

This skill generates a comprehensive daily digest summarizing all critical pending items into a single summary. It aggregates stalled scheduling threads, unanswered emails, pending introductions/follow-ups, open Todoist tasks, and upcoming calendar events from multiple sources. It is essential for running a daily summary cron job or when the user requires a quick status check on their workload and commitments.