Claude Skills by jeremylongshore

'Identify and avoid Windsurf anti-patterns and common mistakes.

'Scale Windsurf adoption across large organizations with workspace strategies

'Configure Windsurf local development workflow with Cascade, Previews,

'Migrate to Windsurf from VS Code, Cursor, or other AI IDEs with full

'Configure Windsurf IDE and Cascade AI across team members and project

'Monitor Windsurf AI adoption, feature usage, and team productivity metrics.

'Optimize Windsurf IDE performance: indexing speed, Cascade responsiveness,

'Implement team-wide Windsurf usage policies, code quality gates, and

'Execute Windsurf production readiness checklist for team and enterprise

'Understand and manage Windsurf credit system, usage limits, and model

'Implement Windsurf reference architecture with optimal project structure

'Implement reliable Cascade workflows with checkpoints, rollback, and

'Apply production-ready Windsurf workspace configuration and Cascade

'Apply Windsurf security best practices for workspace isolation, data

'Upgrade Windsurf IDE, migrate settings from VS Code or Cursor, and handle

'Build Windsurf extensions and integrate with VS Code extension API events.

'Workhuman ci integration for employee recognition and rewards API.

'Workhuman common errors for employee recognition and rewards API.

'Workhuman core workflow a for employee recognition and rewards API.

'Workhuman core workflow b for employee recognition and rewards API.

'Workhuman cost tuning for employee recognition and rewards API.

'Workhuman debug bundle for employee recognition and rewards API.

'Workhuman deploy integration for employee recognition and rewards API.

'Workhuman hello world for employee recognition and rewards API.

'Workhuman install auth for employee recognition and rewards API.

'Workhuman local dev loop for employee recognition and rewards API.

'Workhuman performance tuning for employee recognition and rewards API.

'Workhuman prod checklist for employee recognition and rewards API.

'Workhuman rate limits for employee recognition and rewards API.

'Workhuman reference architecture for employee recognition and rewards

'Workhuman sdk patterns for employee recognition and rewards API.

'Workhuman security basics for employee recognition and rewards API.

'Workhuman upgrade migration for employee recognition and rewards API.

'Workhuman webhooks events for employee recognition and rewards API.

Audit access control implementations for security vulnerabilities and

Generate a local repository risk receipt before Claude Code or other AI-agent edits. Use when the user asks to prepare a repository for agent changes, check for risky hooks or credential-writing automation, or run the /agent-preflight command. Trigger with "run agent preflight", "check this repo before agent edits", or "/agent-preflight".

Validate authentication mechanisms for security weaknesses and compliance.

Generate comprehensive compliance reports for security standards. Use

Validate CORS policies for security issues and misconfigurations. Use

Validate CSRF protection implementations for security gaps. Use when

Scan for data privacy issues and sensitive information exposure. Use

Analyze dependencies for known security vulnerabilities and outdated

Validate encryption implementations and cryptographic practices. Use

Scan for GDPR compliance issues in data handling and privacy practices.

Check HIPAA compliance for healthcare data security requirements. Use

Scan for input validation vulnerabilities and injection risks. Use when

Check compliance with OWASP Top 10 security risks and best practices.

Validate PCI-DSS compliance for payment card data security. Use when

Analyze a target's TLS configuration — negotiated protocol version, cipher suite, certificate chain, expiry, and downgrade vectors. Use when: SOC2 auditor flagged your endpoint for "weak TLS" but you don't know which control failed (TSC CC6.7 transmission integrity vs CC6.6 encryption) or which cipher is the problem. Threshold: any negotiated TLSv1.0 or TLSv1.1, OR a cipher with RC4 / 3DES / null / EXPORT, OR a cert with under 30 days to expiry, OR a chain that fails hostname verification. Tr...

Audit a target's CORS posture — Access-Control-Allow-Origin handling, reflected-origin bypass, credentials+wildcard mismatch, preflight OPTIONS behavior, Vary header correctness. Use when: a third-party integration is failing CORS preflight and someone proposes "just set Allow-Origin to *" as the fix, OR your bug-bounty inbox has a credential-reuse exploit chain. Threshold: any reflection of arbitrary Origin into Allow-Origin, Allow-Credentials:true with wildcard origin (browser-rejected comb...