Skill UI

A comprehensive, phased guide detailing how to migrate your code review process to CodeRabbit. It covers the entire journey, from assessing current tools (like SonarCloud, DeepSource, or manual reviews) and mapping existing rules, through to running a parallel pilot phase and finally achieving full adoption. Ideal for engineering managers or DevOps teams planning a major CI/CD tool transition.

This skill implements a sophisticated, config-driven rules engine for OpenRouter API calls. It dynamically determines the optimal large language model (LLM) by evaluating a comprehensive context, including user subscription tier, remaining cost budget, specific task type (code, chat), required tools, and latency requirements. This is essential for building production-grade, cost-aware, and robust LLM orchestration systems.

Ensures database integrity via the data-validation-engine plugin by automatically enforcing data types, ranges, formats, referential integrity, and business rules whenever validation or database integrity requests arise across multi-database environments.

Vercel Engineering’s authoritative React and Next.js performance guide, offering prioritized rules for waterfalls, bundle size, data fetching, memoization, rendering, caching, and advanced patterns.

A comprehensive guide to establishing production-ready coding standards and context for the Windsurf AI environment. Learn how to utilize root-level rules (.windsurfrules), granular workspace rules, Model Context Protocol (MCP) server integration, and advanced prompt engineering to guide the AI and maintain consistent code quality across projects.

This skill loads and manages company context for C-suite advisors. It reads context files, detects stale data older than 90 days, enriches context during conversations, and enforces privacy rules before external API calls. Use it to start advisor sessions, refresh context, or ensure data privacy.

This tool parses API Gateway access logs from various providers (AWS, Kong, Nginx). It performs statistical analysis using pandas to detect critical security threats such as Broken Object Level Authorization (BOLA/IDOR), credential stuffing, rate limit bypass attempts, and injection vulnerabilities. Ideal for SOC analysts or security engineers investigating API abuse and building advanced threat detection rules.

This skill parses various cyber threat intelligence (CTI) reports (Mandiant, CrowdStrike, etc.) using NLP and specialized libraries (stix2, mitreattack-python, spaCy). It systematically extracts adversary behaviors, maps them to MITRE ATT&CK IDs, and constructs a searchable STIX 2.1 Attack Pattern library. This is essential for threat-informed detection engineering, generating detection rules (Sigma, YARA), and validating security controls.

This skill provides a comprehensive workflow for building vendor-agnostic detection rules using the Sigma format. It empowers security operations center (SOC) engineers to translate raw threat intelligence and MITRE ATT&CK techniques into standardized, portable detection logic. The process guides users through rule validation and conversion into specific queries for major SIEM platforms, including Splunk, Elastic, and Microsoft Sentinel, ensuring robust detection coverage.

A comprehensive guide to configuring pfSense firewalls for robust network security. This skill covers setting up complex network segmentation across multiple zones (DMZ, internal, guest, IoT), implementing granular firewall rules, configuring NAT for port forwarding, and establishing site-to-site or remote-access VPN tunnels using IPsec or OpenVPN. Ideal for network engineers deploying perimeter or internal firewalls.

This skill guides SOC analysts and detection engineers on how to correlate complex, multi-stage attacks within the IBM QRadar SIEM platform. It covers advanced usage of AQL (Ariel Query Language) for deep event investigation, building custom correlation rules (Building Blocks and Offenses), and cross-source data correlation (e.g., auth failures with network flows). It is essential for reducing false positives and improving threat detection accuracy.

This skill provides comprehensive guidelines for detecting Business Email Compromise (BEC), a sophisticated fraud scheme. It covers detection techniques using email gateway rules, behavioral analytics, and robust financial process controls. Learn to identify red flags like unusual payment requests, domain mismatches, and patterns of social engineering to protect against financial loss.