Skill UI

Performs pattern-driven searches for similar vulnerabilities across repositories after a known issue is found, guiding analysts through precise generalization, triage, and tool choices (ripgrep, Semgrep, CodeQL) to audit and prioritize true positives.

Vexor is a powerful command-line interface designed for advanced semantic search across local files. By utilizing vector embeddings and integrating with large language models (like Claude/Codex), it allows users to search files based on meaning and context, rather than just exact keywords. This is ideal for large codebases or document repositories where traditional keyword search methods are insufficient.

This skill provides advanced context management for AI in large-scale, complex codebases. It optimizes context windows, ensures memory persistence across multiple sessions, and helps prioritize critical information. Use it when working with massive code repositories to maintain context and improve developer workflow.

This skill guides the integration of Windsurf workflows into CI/CD pipelines (like GitHub Actions). It provides comprehensive mechanisms for validating configuration files and enforcing AI code quality standards. Use it to automate policy checks, detect hardcoded secrets, ensure sufficient test coverage for new files, and manage complex config deployments across repositories, ensuring highly reliable and compliant code merges.

Generates practical and robust CI/CD pipelines by programmatically detecting the project's entire technology stack (language, runtime, tooling). It provides fast baseline setup for GitHub Actions or GitLab CI, ensuring repeatability, environment awareness, and alignment with project dependencies. Ideal for onboarding new repositories, standardizing DevOps workflows, or migrating existing deployment processes.

This utility is designed to build reusable, composable command-line scripts for interacting with the Hugging Face API and the `hf` command line tool. It enables complex data workflows by supporting chaining, piping, and intermediate processing across models, datasets, and repositories, streamlining the automation of Hub tasks.

Vexor CLI is a powerful tool for developers needing to locate code, functions, or documentation sections within large repositories based on *intent* rather than exact keywords or file paths. It provides semantic discovery, making it invaluable when manual searching or simple text matching fails, helping developers understand the implementation logic across complex codebases.

A comprehensive enterprise-grade security engine designed to discover, classify, protect, and govern all credentials, API keys, and secrets across the entire application lifecycle. It provides continuous governance by auditing code repositories, CI/CD pipelines, runtime logs, and infrastructure configurations to prevent exposure and enforce least privilege principles. Ideal for implementing DevSecOps best practices.

A comprehensive guide to implementing Clean Architecture patterns for both Android and Kotlin Multiplatform (KMP) projects. It covers robust module structuring, dependency inversion rules, defining UseCases and Repositories, and designing the data layer using technologies like Room, SQLDelight, and Ktor. Learn how to separate concerns, maintain platform independence, and manage complex data flows.

This skill provides a systematic methodology for building comprehensive threat actor profiles using Open-Source Intelligence (OSINT). It involves gathering, correlating, and analyzing publicly available data from diverse sources (e.g., vendor reports, dark web forums, code repositories). Users can map adversary TTPs to MITRE ATT&CK, assess motivations, and build structured dossiers for proactive defensive strategies and attribution assessments.

A comprehensive solution for identifying and preventing the accidental commitment of exposed AWS credentials, API keys, and session tokens within source code, configuration files, and git history. It integrates TruffleHog and git-secrets into CI/CD pipelines and pre-commit hooks, providing critical protection against credential theft and unauthorized cloud access in a DevSecOps environment. Essential for security auditing and compliance.

Learn how to implement robust container security by integrating the open-source Trivy scanner (from Aqua Security) into your CI/CD pipelines. This guide covers scanning container images, Kubernetes manifests, IaC files, and code repositories to detect critical vulnerabilities, misconfigurations, secrets, and generating Software Bill of Materials (SBOM) for comprehensive supply chain security.