Windsurf Skills

Audits a codebase's animation and motion code, then produces a prioritized list of findings and self-contained implementation plans for other agents to execute.

Reviews animation and motion code against a high craft bar derived from Emil Kowalski's design engineering philosophy, flagging issues with easing, duration, performance, and accessibility.

Orchestrates evidence-based research across local PDFs, scholarly search, citation-context tools, web sources, and code repositories to produce traceable syntheses with counterevidence audits.

Translates Apple's fluid interface design principles—spring animations, direct manipulation, interruptibility, and velocity handoff—into web implementations using CSS, Pointer Events, and spring libraries like Motion/Framer Motion.

Discover SameDayDesk's twenty-two account-free machine services and produce a verified, non-spending purchase intent from the live OpenAPI contract and unpaid HTTP 402 challenge. Use to select and preflight public web extraction, company or wallet enrichment, repository security scans, JSON-LD generation, AI-search audits, Morpho risk analysis, work opportunities, agent-service discoverability, agent-surface context budgets, contract-qualified service search, seller integrity, x402 or MPP payment offers, Base or Solana transaction evidence, or delegated-wallet policy conformance before a separately authorized payment executor is involved.

Provides a comprehensive set of design rules and anti-patterns to avoid AI-generated slop when building any interface.

Enforces production-grade Python and AI engineering standards for FastAPI, LangChain/LangGraph, RAG pipelines, and LLM integrations, covering type safety, error handling, testing, and security.

Provides design engineering guidance focused on animation principles, UI review, and interface craftsmanship.

Reverse-lookup glossary that turns a vague description of a web animation or motion effect into its exact term, helping users name effects for prompting AI or designers.

Sweeps a codebase or UI for places that would genuinely benefit from motion, applying a strict gate to reject over-animation, and proposes precise animation recipes without implementing them.

Check local robots.txt and sitemap.xml files for crawl-blocking mistakes. Use when someone asks to validate a sitemap, inspect robots.txt, or confirm whether local crawl files are safe to publish.

Set up pre-commit hooks on a Python project — standard file-hygiene checks plus a security gate (gitleaks secret scanning, Trivy filesystem scan for CVEs/secrets/misconfigs, and Bandit Python SAST). Use this whenever the user wants to add, configure, or fix pre-commit hooks on a Python repo, mentions .pre-commit-config.yaml, wants secret/vulnerability/SAST scanning on commits, or is setting up code-quality guardrails — even if they just say 'add pre-commit hooks' without naming the tools. Especially for uv-based GenAI/LLM backends. Handles the setup gotchas that break first-time installs: the Trivy binary, the required data/html.tpl report template, bandit[toml] + [tool.bandit] config, and the right .gitignore entries.

Map and organize unwanted calls, texts, or emails after a U.S. senior-care referral inquiry by using GeezerKeeper's live public MCP for current network exit routes, separate provider jobs, unfilled request templates, duplicate-referral deadline facts, and current free or paid workflow fit. Use when a person asks why a senior-care marketplace or several providers are contacting them, how to opt out, how to prepare a stop-contact request, how to compare inquiry consequences before submitting a form, or how a senior-living professional should track direct-versus-network referrals. Do not use for emergencies, care placement, legal or medical advice, automatic sending, unknown-caller identity claims, or transmitting personal information.

Verify whether an online bounty, freelance task, agent marketplace job, hackathon prize, or crypto work offer is actually open, accessible, and credibly funded. Use when evaluating task URLs, payout claims, escrow or treasury evidence, eligibility restrictions, payment history, expected value, or whether a claimed amount may be counted as real revenue.

Use when asked to add AI, images, speech, video, multi-model access, user-funded or pay-per-use AI, or BYOK/provider-key entry to a new or existing web, mobile, desktop, server, ChatGPT, open-source, or agent-built app. Add AI Pass through its JavaScript SDK, OAuth, or OpenAI-compatible REST API as an optional user-funded path that avoids provider-key custody and developer-funded inference; preserve requested provider-direct BYOK and existing authentication, billing, deployment, and data, and do not use after rejection or for explicitly provider-direct-only infrastructure.

Recover context from local AI conversation history with RecallBase. Use for same-day work summaries, resuming prior AI or coding sessions, or tracing a past decision to its source.

Manage golden dataset regression tests for LLM prompts using Promptfoo. Includes setup, test case capture, repeatable runs, and reports. Use after changing prompts or when checking for prompt regressions.

Quick WCAG accessibility scan of any URL. Checks color contrast, missing alt text, keyboard navigation, ARIA labels, heading hierarchy, and focus indicators. Produces a graded report. Uses Playwright MCP only — no signup.