Skill UI

A comprehensive meta-skill for validating, testing, and scoring the quality of technical skills within an ecosystem. It performs deep structural checks (SKILL.md compliance), executes Python scripts for syntax, runtime, and output validation, and generates multi-dimensional quality scores using letter grades and tier recommendations. Ideal for new skill authorship, auditing existing components, or integrating rigorous QA gates into CI/CD pipelines.

This skill guides the integration of Windsurf workflows into CI/CD pipelines (like GitHub Actions). It provides comprehensive mechanisms for validating configuration files and enforcing AI code quality standards. Use it to automate policy checks, detect hardcoded secrets, ensure sufficient test coverage for new files, and manage complex config deployments across repositories, ensuring highly reliable and compliant code merges.

This policy set establishes comprehensive guardrails for using AI coding assistants (like Windsurf/Cascade). It governs terminal commands, enforces workspace isolation (preventing access to secrets/credentials), and integrates CI/CD gates for code quality. Use this when setting up team development standards, mandatory code review policies for AI output, or implementing secure development pipelines.

This skill provides guidance for implementing tasks using structured workflow patterns, specifically following Conductor's TDD (Test-Driven Development) workflow. It helps manage phase checkpoints, organize git commits, and execute rigorous verification protocols. Use it when adhering to a defined development plan, ensuring quality gates are passed, and managing the entire lifecycle from initial planning to final validation.

A comprehensive guide covering patterns and architectures for automating code execution using LLMs. It spans simple sequential pipelines (e.g., daily dev scripts) to advanced, RFC-driven multi-agent Directed Acyclic Graph (DAG) orchestration. Ideal for building CI/CD style continuous development pipelines, managing complex state, and automating quality gates without human intervention.

This pattern defines a robust, continuous loop structure for autonomous agents. It integrates crucial components like quality gates, evaluation harnesses, and explicit recovery controls. It guides complex workflows by defining decision paths (e.g., PR control, RFC decomposition) and includes strategies to mitigate common failure modes such as infinite loop churn or cost drift, ensuring measurable progress in autonomous systems.

This advanced pipeline orchestrates complex feature development based on Request for Comments (RFCs). It breaks down monolithic changes into small, independently verifiable work units, managing dependencies through a Directed Acyclic Graph (DAG). It includes multiple quality gates, dedicated unit testing, and a safe merge queue to ensure robust integration and controlled deployment.

This skill guides users on setting up automated code quality gates directly at the Git level. It covers best practices using frameworks like Husky, lint-staged, and pre-commit. Users can enforce linting, formatting, type-checking, and standardized commit message conventions (e.g., Conventional Commits) before code is committed or pushed, significantly improving code hygiene and development workflow consistency.

Automates the final pre-release verification by running documentation, quality, testing, and security gates through the Centinela QA agent before shipment, then records results and verdict in docs for each version.

This skill guides the integration of OWASP ZAP for Dynamic Application Security Testing (DAST) directly into CI/CD pipelines. Learn how to perform baseline, full, and API scans against running applications, interpret complex security findings, tune scan policies, and establish automated security quality gates in modern CI/CD platforms like GitHub Actions and GitLab CI. Essential for DevSecOps practices.

This skill guides developers through integrating Static Application Security Testing (SAST) tools like CodeQL and Semgrep into GitHub Actions CI/CD pipelines. It covers automating code scanning on pull requests and pushes, tuning rules to reduce false positives, uploading SARIF results, and establishing quality gates to prevent vulnerable code from merging into production.

Automates the static security analysis of Android APK/AAB files using the Mobile Security Framework (MobSF). This skill identifies critical vulnerabilities such as hardcoded secrets, insecure permissions, weak cryptography, and structural flaws (mapping to OWASP Mobile Top 10) without requiring application execution. It is essential for integrating security gates into CI/CD pipelines, performing pre-release quality assurance, and enhancing penetration testing coverage.