Skill UI

Analyzes existing Rails applications to provide a comprehensive and detailed upgrade assessment. This tool checks current gem and JavaScript dependencies, compares the running version against the latest stable release, fetches official upgrade guides, and generates diff reports. It assesses upgrade complexity (Small, Medium, Large) to ensure smooth and safe version migration for Ruby on Rails projects.

A comprehensive guardrail system for enforcing organizational governance across Supabase projects. It provides reusable RLS policy templates, strict naming conventions, CI-checked migration processes, cost alert configurations, and security audit scripts. Use this to ensure development consistency, security, and cost control at scale.

Implement comprehensive guardrails for Vercel applications, covering the entire development lifecycle. This solution includes custom ESLint rules to prevent secret exposure, pre-commit hooks for credential scanning, and robust CI checks to validate vercel.json, ensure edge runtime compatibility, and monitor bundle size, guaranteeing high quality and secure deployments.

This guide details how to configure Windsurf for professional enterprise deployment, covering critical security and governance features. Key areas include setting up SSO/SAML authentication, defining role-based permissions (Owner, Admin, Member), establishing organization-wide AI policies and data controls, managing user seats, and implementing comprehensive audit trails for compliance.

This policy set establishes comprehensive guardrails for using AI coding assistants (like Windsurf/Cascade). It governs terminal commands, enforces workspace isolation (preventing access to secrets/credentials), and integrates CI/CD gates for code quality. Use this when setting up team development standards, mandatory code review policies for AI output, or implementing secure development pipelines.

This powerful tool helps translate natural language requirements into robust, normalized relational database schemas. It can generate comprehensive schema designs, complete with relationships, constraints, and advanced architectural concerns like multi-tenancy, soft deletes, and audit trails. Furthermore, it automates the generation of database migrations (supporting Prisma, TypeORM, Alembic, etc.), corresponding type definitions (TypeScript/Python), seed data, and Entity-Relationship Diagrams (ERD) using Mermaid.

This script automates the generation of a complete set of favicons (including favicon.ico, various PNG sizes, and SVG) from a single source image. It intelligently detects the project framework (e.g., Next.js, Rails, Gatsby) to place assets in the correct static directory, generates the necessary webmanifest, and updates the project's HTML/layout files with the proper link tags.

This skill generates a complete, opinionated, modern full-stack Rails application boilerplate. It sets up a robust tech stack including Rails 8, PostgreSQL, React, Inertia.js, Vite, Tailwind CSS, Sidekiq, and Redis. Designed for developers who need a starting point that adheres to best practices for database structure (UUIDs, JSONB), background job processing, comprehensive testing, and modern frontend development (TSX). Ideal for bootstrapping complex, production-grade web services.

Provides guidance and tooling tips for upgrading Ruby on Rails applications, helping developers prepare for new releases and manage dependency shifts safely.

Security guardrails embedded in the mortgage plugin that block prompt injection and social-engineering tricks, stop system prompt extraction, guard PII and pricing logic, enforce workflow phases, and ensure conversational inputs stay within refinance scope.

A comprehensive design specification detailing 98 rules for building Command Line Interface (CLI) tools that are safe, reliable, and easily consumable by AI agents. It covers structured JSON output formats, standardized error handling (to stderr), robust input contracts, safety guardrails (e.g., preventing path traversal), and tiered compliance levels (Agent-Friendly, Agent-Ready, Agent-Native) for seamless integration into AI workflows.

A specialized skill for discovering and exploiting Mass Assignment vulnerabilities (autobinding) in REST APIs. It guides the injection of unexpected or hidden parameters (such as role or isAdmin) into create/update requests. This technique is crucial during API security assessments to test for privilege escalation, authorization bypass, and unintended parameter binding in ORM-backed endpoints (e.g., Rails, Django).