Skill UI

This skill guides developers through installing the Vercel Command Line Interface (CLI) and configuring secure authentication. It covers multiple setup scenarios, including interactive OAuth login, setting environment tokens for CI/CD pipelines, and linking a local project directory to a specific Vercel project. Essential for initial project setup and ensuring smooth deployments.

Implement comprehensive guardrails for Vercel applications, covering the entire development lifecycle. This solution includes custom ESLint rules to prevent secret exposure, pre-commit hooks for credential scanning, and robust CI checks to validate vercel.json, ensure edge runtime compatibility, and monitor bundle size, guaranteeing high quality and secure deployments.

A comprehensive guide for implementing secure and reliable webhook endpoints to handle Vercel deployment lifecycle events. This skill covers signature verification (HMAC) to ensure security, processing key events (e.g., deployment.ready, deployment.error), and implementing idempotency to prevent duplicate actions. Ideal for building automated CI/CD integrations, status notifications, or custom project hooks that react to deployment changes in real-time.

This skill guides the integration of Windsurf workflows into CI/CD pipelines (like GitHub Actions). It provides comprehensive mechanisms for validating configuration files and enforcing AI code quality standards. Use it to automate policy checks, detect hardcoded secrets, ensure sufficient test coverage for new files, and manage complex config deployments across repositories, ensuring highly reliable and compliant code merges.

This skill provides AI-assisted capabilities for creating and managing Continuous Integration/Continuous Deployment (CI/CD) workflows using GitHub Actions. It can generate new workflows from project requirements, optimize existing pipelines, debug failures, and implement industry-standard security best practices, streamlining the entire development and deployment process.

Integrates Windsurf's native deployment features and Cascade workflows to automate the entire build, test, and deployment cycle. Supports major platforms like Netlify, Vercel, AWS, and Google Cloud Run, enabling users to manage the full CI/CD pipeline, including preview deployments and rollbacks, directly within the IDE.

This policy set establishes comprehensive guardrails for using AI coding assistants (like Windsurf/Cascade). It governs terminal commands, enforces workspace isolation (preventing access to secrets/credentials), and integrates CI/CD gates for code quality. Use this when setting up team development standards, mandatory code review policies for AI output, or implementing secure development pipelines.

This skill automates the entire software release workflow within Windsurf. It analyzes commit history based on conventional commits to determine the correct semantic version bump (major, minor, or patch). It then automatically generates comprehensive changelogs, manages Git tags, updates version files, and publishes the final release package to a registry. It is essential for teams implementing robust CI/CD practices.

Provides Wycheproof test vectors for validating cryptographic implementations against known attacks and edge cases, making it ideal for CI regression sweeps and third-party crypto audits.

Automated guidance for YAML configuration validation tasks within the DevOps Basics domain, covering version control, containers, CI/CD, and infrastructure fundamentals while producing production-ready code and configurations.

Automatically monitors YAML workflows to validate syntax, infer schemas, convert formats, and harden Kubernetes/Docker Compose/CI configurations while spotting anti-patterns and security gaps.

Audits GitHub Actions workflows that invoke AI coding agents to surface prompt injection and sandbox risks, tracing attacker-controlled inputs through env vars, reusable actions, and workflow references before deployment or code review.