Skill UI

Guidelines for reviewing UI code against web interface best practices, covering accessibility, performance, responsive design, component patterns, CSS practices, security, and internationalization during audits or UX evaluations.

Runs a Lighthouse-based audit that combines performance, accessibility, SEO, and best-practice checks, categorizes issues by severity, and recommends targeted fixes for requested site reviews.

This skill simulates an expert software engineer and systems analyst. It is designed for deep, evidence-based understanding of complex codebases. Users can ask "how does X work" or request architectural reviews, ensuring every claim is grounded in actual code paths, data flows, and dependency chains, following a rigorous multi-iteration process.

This skill enables teams to create, manage, and organize custom prompt libraries for developer workflows within the Cascade environment. Users can build reusable prompt templates for common tasks, including code generation, code review, documentation, debugging, and general software development, ensuring consistency and boosting team efficiency.

Integrates Windsurf's native deployment features and Cascade workflows to automate the entire build, test, and deployment cycle. Supports major platforms like Netlify, Vercel, AWS, and Google Cloud Run, enabling users to manage the full CI/CD pipeline, including preview deployments and rollbacks, directly within the IDE.

This skill allows users to customize and optimize keyboard shortcuts within the Windsurf IDE, covering AI features, multi-file editing, and custom workflow bindings. It is used when setting up, reviewing, or adapting keybindings for maximum productivity and ergonomic efficiency.

Guides the setup of a high-efficiency, AI-augmented local development loop. This skill integrates features like Cascade editing, in-IDE Previews, and Turbo mode command execution, enabling developers to quickly iterate, debug, and commit changes within a structured environment. Ideal for setting up new projects or optimizing existing development workflows.

This policy set establishes comprehensive guardrails for using AI coding assistants (like Windsurf/Cascade). It governs terminal commands, enforces workspace isolation (preventing access to secrets/credentials), and integrates CI/CD gates for code quality. Use this when setting up team development standards, mandatory code review policies for AI output, or implementing secure development pipelines.

Guides writing high-quality YARA-X detection rules for malware hunting, covering naming conventions, string selection, performance tuning, migrations from legacy YARA, and reducing false positives when authoring, reviewing, or debugging signatures.

This skill guides users through a comprehensive, multi-stage process for creating high-quality documentation. It systematically moves through Context Gathering (understanding the background and audience), Refinement & Structure (iteratively building and editing sections), and Reader Testing (simulating external review to catch blind spots). Ideal for drafting complex specifications, proposals, or design documents that need to be robust and clear for a wide audience.

Audits GitHub Actions workflows that invoke AI coding agents to surface prompt injection and sandbox risks, tracing attacker-controlled inputs through env vars, reusable actions, and workflow references before deployment or code review.

BGPT Paper Search queries the remote MCP server to retrieve structured experimental data from full-text studies, returning methods, results, sample sizes, quality scores, and conclusions for efficient literature reviews and evidence synthesis.