Skill UI

This comprehensive template provides a production-grade reference architecture for CodeRabbit AI code reviews. It is designed to guide teams in establishing rigorous coding standards by defining specific, best-practice instructions for various layers (API, Database, Authentication, Frontend, CI/CD, Infrastructure). Use this as a robust starting point to build a comprehensive, automated, and secure code quality review process.

This skill provides a comprehensive guide to configuring CodeRabbit for advanced, security-focused code reviews. It teaches how to implement rules for detecting hardcoded secrets, common vulnerabilities (like SQL injection and XSS), and enforcing secure coding standards across APIs, databases, and infrastructure code. Use this when hardening a codebase's security posture or ensuring compliance with industry standards.

Behavioral rules for LLMs writing or reviewing code, emphasizing caution, simplicity, surgical edits, and goal-driven execution to avoid common mistakes during implementation tasks, bug fixes, or refactors.

Provides universal coding standards and best practices for TypeScript, JavaScript, React, and Node.js projects, covering naming, immutability, async handling, component design, API structure, and validation to keep teams aligned.

This skill converts vague coding requests into a highly structured, actionable, and atomic development plan. It guides the user through defining the approach, scope (In/Out), and breaking down the task into a mandatory checklist of ordered, concrete steps (e.g., discovery, implementation, validation). Ideal for ensuring comprehensive and traceable project development workflows.

This skill is designed to configure a Rails project workspace to function correctly within Conductor, a platform for parallel coding agents. It sets up the necessary scaffolding, including `conductor.json`, executable setup scripts, and server scripts. Additionally, it updates critical Rails configuration files (such as Sidekiq, Cable, and development environment settings) to ensure proper environment variable handling, Redis isolation, and port management for reliable parallel agent execution.

Addresses the critical challenge of managing extremely long conversation histories (millions of tokens) in advanced AI agents, such as coding assistants. This technique moves beyond simple token minimization by implementing structured compression strategies (like Anchored Iterative Summarization) to prevent the loss of critical technical details—such as file paths, decisions, and error messages—ensuring the agent maintains functional context across complex, multi-step tasks. It emphasizes optimizing for 'tokens-per-task' rather than just tokens-per-request.

This advanced system transforms session interactions into reusable, atomic knowledge units called "Instincts." By hooking into tool usage and session activity, it observes patterns (like preferred coding styles, error fixes, or repeated workflows). These instincts are then clustered and "evolved" into structured Skills, Commands, or specialized Agents, capturing deep contextual knowledge with weighted confidence scoring to enhance development productivity.

Automated guidance for cookie security analysts that covers authentication, validation, secure coding, and vulnerability detection while generating production-ready code and configurations.

A comprehensive guide derived from C++ Core Guidelines, enforcing modern, safe, and idiomatic practices for C++17, C++20, and C++23. It emphasizes crucial principles like RAII, type safety, immutability, and proper resource ownership using smart pointers. Use this when writing new features, reviewing existing code, or making architectural decisions to ensure code quality and consistency.

Automates CSRF protection validator guidance within Security Fundamentals, offering best-practice patterns, production-ready code, and validation checks for authentication and secure-coding tasks.

Automates Currents API operations through Composio’s Rube MCP, guiding tool discovery, connection checks, schema compliance, and multi-tool execution so clients can run reliable workflows without hardcoding schemas.