Skill UI

A comprehensive guardrail system for enforcing organizational governance across Supabase projects. It provides reusable RLS policy templates, strict naming conventions, CI-checked migration processes, cost alert configurations, and security audit scripts. Use this to ensure development consistency, security, and cost control at scale.

Implement comprehensive guardrails for Vercel applications, covering the entire development lifecycle. This solution includes custom ESLint rules to prevent secret exposure, pre-commit hooks for credential scanning, and robust CI checks to validate vercel.json, ensure edge runtime compatibility, and monitor bundle size, guaranteeing high quality and secure deployments.

This guide details how to configure Windsurf for professional enterprise deployment, covering critical security and governance features. Key areas include setting up SSO/SAML authentication, defining role-based permissions (Owner, Admin, Member), establishing organization-wide AI policies and data controls, managing user seats, and implementing comprehensive audit trails for compliance.

This policy set establishes comprehensive guardrails for using AI coding assistants (like Windsurf/Cascade). It governs terminal commands, enforces workspace isolation (preventing access to secrets/credentials), and integrates CI/CD gates for code quality. Use this when setting up team development standards, mandatory code review policies for AI output, or implementing secure development pipelines.

This powerful tool helps translate natural language requirements into robust, normalized relational database schemas. It can generate comprehensive schema designs, complete with relationships, constraints, and advanced architectural concerns like multi-tenancy, soft deletes, and audit trails. Furthermore, it automates the generation of database migrations (supporting Prisma, TypeORM, Alembic, etc.), corresponding type definitions (TypeScript/Python), seed data, and Entity-Relationship Diagrams (ERD) using Mermaid.

This script automates the generation of a complete set of favicons (including favicon.ico, various PNG sizes, and SVG) from a single source image. It intelligently detects the project framework (e.g., Next.js, Rails, Gatsby) to place assets in the correct static directory, generates the necessary webmanifest, and updates the project's HTML/layout files with the proper link tags.

This skill generates a complete, opinionated, modern full-stack Rails application boilerplate. It sets up a robust tech stack including Rails 8, PostgreSQL, React, Inertia.js, Vite, Tailwind CSS, Sidekiq, and Redis. Designed for developers who need a starting point that adheres to best practices for database structure (UUIDs, JSONB), background job processing, comprehensive testing, and modern frontend development (TSX). Ideal for bootstrapping complex, production-grade web services.

Provides guidance and tooling tips for upgrading Ruby on Rails applications, helping developers prepare for new releases and manage dependency shifts safely.

Security guardrails embedded in the mortgage plugin that block prompt injection and social-engineering tricks, stop system prompt extraction, guard PII and pricing logic, enforce workflow phases, and ensure conversational inputs stay within refinance scope.

A comprehensive design specification detailing 98 rules for building Command Line Interface (CLI) tools that are safe, reliable, and easily consumable by AI agents. It covers structured JSON output formats, standardized error handling (to stderr), robust input contracts, safety guardrails (e.g., preventing path traversal), and tiered compliance levels (Agent-Friendly, Agent-Ready, Agent-Native) for seamless integration into AI workflows.

A comprehensive guide and method for extracting and analyzing digital forensic artifacts from major web browsers, including Chrome, Firefox, and Edge. This process retrieves critical data such as web history, cookies, cached items, downloads, and bookmarks to reconstruct user web activity trails for deep cybersecurity and digital forensics investigations.

This skill guides security analysts through advanced threat-hunting methodologies focused on detecting DNS-based persistence. It analyzes passive DNS history, zone file audits, and API data (like SecurityTrails) to identify unauthorized record modifications, subdomain takeovers, and DNS hijacking attempts that bypass traditional security controls. Ideal for SOC analysts and threat hunters.