Skill UI

Automates Vault Secrets Integrator guidance for DevOps Advanced tasks, covering kubernetes, terraform, CI/CD, monitoring, and infrastructure as code best practices to deliver validated configs and code.

A comprehensive guide to configuring Vercel across Development, Preview, and Production environments. Learn how to scope environment variables, manage secrets, and automate multi-stage deployments using both the Vercel CLI and REST API. Covers setting up custom environments (e.g., Staging) and implementing environment detection in code for reliable application behavior.

This skill guides the integration of Windsurf workflows into CI/CD pipelines (like GitHub Actions). It provides comprehensive mechanisms for validating configuration files and enforcing AI code quality standards. Use it to automate policy checks, detect hardcoded secrets, ensure sufficient test coverage for new files, and manage complex config deployments across repositories, ensuring highly reliable and compliant code merges.

This comprehensive guide details how to control and audit the scope of code and data accessible by AI tools (like Codeium or Windsurf AI). Learn to implement robust data exclusion patterns, set compliance boundaries (e.g., HIPAA, GDPR), and configure secure deployment modes, ensuring sensitive data and secrets are never processed or retained by the AI model.

This policy set establishes comprehensive guardrails for using AI coding assistants (like Windsurf/Cascade). It governs terminal commands, enforces workspace isolation (preventing access to secrets/credentials), and integrates CI/CD gates for code quality. Use this when setting up team development standards, mandatory code review policies for AI output, or implementing secure development pipelines.

A comprehensive guide to securing development workspaces using Windsurf. This skill teaches how to apply best practices for workspace isolation, prevent sensitive data (secrets, PII) from leaking into AI indexes, manage telemetry, and ensure compliance by configuring exclusion files and security rules.

Detects missing zeroization of secrets and flags compiler-optimized removals with mandatory assembly/IR evidence, helping auditors verify C/C++/Rust cryptographic code through dataflow, CFG, and runtime validation.

A comprehensive guide for managing secrets and environment variables throughout the entire development lifecycle, from local development to production. This skill covers secret leak auditing (detecting committed credentials), implementing robust rotation workflows, and integrating with industry-leading secret stores like HashiCorp Vault, AWS Secrets Manager, and Azure Key Vault. Essential for hardening CI/CD pipelines and ensuring compliance.

A powerful skill for conducting structured, systematic code reviews for PRs and MRs. It goes beyond basic style checks, performing deep analysis such as blast radius tracing, comprehensive security scanning (SQLi, XSS, secrets), detecting breaking changes in APIs/DB schemas, and calculating test coverage delta. Ideal for reviewing large, complex, or security-sensitive code changes before merging.

This skill simulates a senior engineer's final, deep audit of an entire codebase before committing or pushing to a remote repository. It systematically checks for junk files, dead code, security vulnerabilities (secrets, injection flaws), and performance bottlenecks (N+1 queries). Use this pre-flight check before any major release or public deployment to ensure maximum code quality and production readiness.

Scans cryptographic implementations to flag operations whose timing decisions leak secrets, offering language-specific guides, architecture/optimization options, and output modes so teams can enforce constant-time practices across reviews and CI.

This comprehensive guide details how to establish secure and robust API endpoints using Expo Router and EAS Hosting. Learn best practices for handling server-side secrets (API keys, credentials), proxying third-party services (like OpenAI), executing secure database operations, and implementing complex business logic entirely on the server. It covers file structure, HTTP methods, and deployment to Cloudflare Workers.