Skill UI

This module provides the essential three pillars for building robust full-stack applications on Supabase. It implements comprehensive user authentication (including OAuth, email/password, and session management), secure file storage (uploading, downloading, and managing signed URLs), and real-time data subscriptions (listening to Postgres changes, presence, and broadcasts). It is crucial for developing modern, live-updating, and highly secure web services.

Validating Authentication Implementations assesses authentication mechanisms like JWT, OAuth, sessions, and API keys against security standards, then reports vulnerabilities and recommendations for password policy, MFA, token handling, and session security.

Vexor is a powerful command-line interface designed for advanced semantic search across local files. By utilizing vector embeddings and integrating with large language models (like Claude/Codex), it allows users to search files based on meaning and context, rather than just exact keywords. This is ideal for large codebases or document repositories where traditional keyword search methods are insufficient.

Automates spoken-word video editing by transcribing footage, detecting mispronunciations or pauses with AI, generating review pages, and surfacing actionable deletion lists for user approval before trimming.

This skill enables comprehensive audit logging for Windsurf Enterprise deployments. It covers tracking of AI interactions, file access events, authentication changes, and overall configuration modifications. It is essential for maintaining strict compliance standards and performing detailed security audits, particularly when the user mentions audit or compliance keywords.

A comprehensive workflow bundle covering the entire lifecycle of WordPress development. It guides users through creating custom themes, developing functional plugins, integrating WooCommerce, and optimizing performance. Crucially, it includes steps for implementing advanced WordPress 7.0 features such as Real-Time Collaboration (RTC), AI Connectors, and DataViews, ensuring modern, production-ready site builds.

Guides security pros through WordPress 7.0 attack surfaces covering discovery, enumeration, vulnerability scanning, credential checks, and exploitation with WPScan, Burp, Metasploit, and manual curl probes for authorized assessments.

A comprehensive, multi-phase workflow for developing professional WordPress plugins. Covers foundational architecture, hooks, admin UI, database design, and REST API implementation. Crucially, it incorporates advanced WordPress 7.0 features, including Real-Time Collaboration (RTC) compatibility, AI Connector integration (OpenAI, Claude, etc.), and the Abilities API, ensuring modern, scalable, and secure plugins.

Provides comprehensive expertise for building robust WordPress sites. Specializing in custom theme and plugin development, implementing modern Gutenberg blocks, extending WooCommerce functionality, and managing the WordPress REST API. Core focus areas include advanced security hardening (nonces, sanitization, capability checks), performance optimization (caching, query tuning), and adhering strictly to WordPress coding standards.

This comprehensive workflow guides developers through creating custom WordPress themes from scratch. It covers theme architecture, template hierarchy, custom post types, advanced Gutenberg block editor support, and incorporates the latest features slated for WordPress 7.0, such as Patterns and Admin Refresh, ensuring modern and functional development.

A comprehensive workflow for building and optimizing e-commerce stores using WooCommerce. This guide covers all phases, including store setup, payment gateway integration, shipping configuration, and custom product types. It heavily integrates advanced WordPress 7.0 features, such as AI-powered content generation, fraud detection, and real-time team collaboration tools, ensuring a modern, highly functional online store.

Guides analysts through assessing web authentication, credential stuffing, password policies, session tokens, and fixation flows to uncover broken authentication risks before attackers do.