Install
$ agentstack add skill-alex-voloshin-dev-ai-skills-ai-skills ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
AI Assets
Build and maintain Windsurf-native AI assets for this repository. Treat every asset as live Windsurf prompt surface.
1. Determine Scope
Identify:
- Operation:
create|modify|validate|analyze - Asset type:
agents-md|skill|template|checklist|script - Target path or asset name
If the request is ambiguous, resolve it from repository context before asking the user.
2. Gather Context
Read only the assets needed for the task:
- The target asset, if it exists
- Root
AGENTS.md - Relevant scoped
AGENTS.mdfiles - Relevant
.windsurf/skills/*/SKILL.mdfiles - Relevant files under
.windsurf/ context-engineeringskill when the asset affects prompt layering, memory, RAG, or orchestration
3. Build a Dependency Map
Map outgoing and incoming references.
Check for:
- References to
AGENTS.md - References to
.windsurf/skills// - References to shared templates, checklists, or support resources under
.windsurf/skills/ai-skills/ - References to explicit support scripts such as
.windsurf/hooks/scripts/* - Missing files
- Orphaned assets
- Circular references that add confusion
For analyze, stop after presenting the dependency map.
4. Choose the Right Windsurf Primitive
Use the smallest asset that matches the job:
- Repository or directory policy ->
AGENTS.md - Reusable task workflow or knowledge ->
.windsurf/skills//SKILL.md - Reusable authoring scaffold -> supporting resources under
.windsurf/skills//templates/ - Validation procedure -> supporting resources under
.windsurf/skills//checklists/or companion markdown files - Repeatable local automation -> explicit support scripts owned by the target package
Do not recreate Claude-specific primitives such as agent files, Claude settings, or Claude hook configs.
5. Authoring Rules
AGENTS.md
- Put hard constraints first
- Keep project facts concrete and current
- Keep global policy in the root file and local conventions in scoped files
- Avoid repeating parent guidance verbatim
SKILL.md
- Include
nameand a specificdescription - Optimize
descriptionfor correct progressive disclosure - Keep the workflow executable with minimal ambiguity
- Move bulky references and checklists into companion markdown files
Templates and Checklists
- Prefer short, reusable structures
- Separate policy from examples
- Make completion criteria explicit
Scripts
- Keep scripts visible and optional
- Never hide critical behavior behind implicit automation
- Prefer PowerShell for this repository's local automation
6. Prompt Engineering Review
Review the asset as live Windsurf context:
- What part of Windsurf behavior does it shape?
- What failure mode does it prevent or enable?
- Is the instruction hierarchy clear?
- Is critical information front-loaded?
- Is the token cost justified?
Use review-checklist.md for the full validation pass.
7. Validate
Run these checks on every create or modify operation:
- Asset uses Windsurf-native concepts only
- References resolve
- No machine-specific paths unless intentionally local documentation
- No secrets or credentials
- English only
SKILL.mdremains concise enough for progressive disclosureAGENTS.mdguidance is specific, not generic
If the asset changes the Windsurf package structure, update the package README or mapping docs.
8. Finalize
Report:
- What changed
- Dependency status
- Validation result
- Remaining follow-up items
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: alex-voloshin-dev
- Source: alex-voloshin-dev/ai-skills
- License: MIT
- Homepage: https://voloshin.net
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.