60 presets across 30 technologies
Review an Angular change for standalone components, signals, zoneless updates, and Signal Forms. Use for an Angular code review. Do not use for a new NgModule-first app or a non-Angular repository.
# Angular Code Review Skill for Windsurf
## Install
Install the native export at `.devin/skills/angular-code-review/SKILL.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# Angular Code Review Skill for Windsurf
Devin skill `angular-code-review` for Angular. Invoke it with `/angular-code-review`. Install only `.devin/skills`. This file is not a subagent.
## When to run
Run this review for an Angular change: a component, a form, a route, or "is this still the old style".
## When to leave it
Stop for a non-Angular repository. Do not up...Windsurf rules for Angular: Standalone Components, Signals and Forms. Structure, data, errors, security, performance, and tests. Angular 22.2.6, Nov 2026.
# Angular Windsurf Rules: Standalone Components, Signals and Forms
## Install
Install the native export at `.devin/rules/angular-rules.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# Angular Windsurf Rules: Standalone Components, Signals and Forms
Devin rule for Angular. Install the `.devin/rules` file. The trigger is model decision. Do not also copy it into `.windsurf/rules`.
## Updated for Angular 22.2.6, Nov 2026
Do not upgrade dependencies or the framework version unless the task asks.
## Project shape
New components are standa...Windsurf rules for Django: ORM, Permissions and Migrations. Structure, data, errors, security, performance, and tests. Django 6.1.3, Nov 2026.
# Django Windsurf Rules: ORM, Permissions and Migrations
## Install
Install the native export at `.devin/rules/django-rules.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# Django Windsurf Rules: ORM, Permissions and Migrations
Devin rule for Django. Install the `.devin/rules` file. The trigger is model decision. Do not also copy it into `.windsurf/rules`.
## Updated for Django 6.1.3, Nov 2026
Do not upgrade dependencies or the framework version unless the task asks.
## Project shape
An app owns its models, forms, and views. A view ...Review a Django change for permission checks, ORM query shape, and migration behavior. Use for a Django security review. Do not use for a non-Django project or to assume a database cascade runs Django signals.
# Django Security Review Skill for Windsurf
## Install
Install the native export at `.devin/skills/django-security-review/SKILL.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# Django Security Review Skill for Windsurf
Devin skill `django-security-review` for Django. Invoke it with `/django-security-review`. Install only `.devin/skills`. This file is not a subagent.
## When to run
Run this review for a Django view, model, form, or migration.
## When to leave it
Stop for a non-Django repository. Do not upgrade Django or run a migrat...Windsurf rules for Docker: Images, Runtime Users and Build Secrets. Structure, data, errors, security, performance, and tests. Docker Engine 29, Nov 2026.
# Docker Windsurf Rules: Images, Runtime Users and Build Secrets
## Install
Install the native export at `.devin/rules/docker-rules.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# Docker Windsurf Rules: Images, Runtime Users and Build Secrets
Devin rule for Docker. Install the `.devin/rules` file. The trigger is model decision. Do not also copy it into `.windsurf/rules`.
## Updated for Docker Engine 29, Nov 2026
Do not upgrade dependencies or the framework version unless the task asks.
Keep Engine, BuildKit, and Compose versions as ...Review a Dockerfile or Compose file for root runtime, latest tags, secrets in layers, and the Docker socket. Use for a Docker security review. Do not use for a non-container change or to mount the Docker socket into an app container.
# Docker Security Review Skill for Windsurf
## Install
Install the native export at `.devin/skills/docker-security-review/SKILL.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# Docker Security Review Skill for Windsurf
Devin skill `docker-security-review` for Docker. Invoke it with `/docker-security-review`. Install only `.devin/skills`. This file is not a subagent.
## When to run
Run this review for a Dockerfile, a Compose file, or a request to "check the image".
## When to leave it
Do not upgrade dependencies or the framework ver...Review a .NET change for async cancellation, endpoint authorization, and C# syntax the target framework does not have. Use for a .NET code review. Do not use for a non-.NET repository or to retarget the TFM unasked.
# .NET Code Review Skill for Windsurf
## Install
Install the native export at `.devin/skills/dotnet-code-review/SKILL.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# .NET Code Review Skill for Windsurf
Devin skill `dotnet-code-review` for .NET. Invoke it with `/dotnet-code-review`. Install only `.devin/skills`. This file is not a subagent.
## When to run
Run this review for a .NET or C# change: an endpoint, an EF query, or an async method.
## When to leave it
Stop for a non-.NET repository. Do not change `TargetFramework` unless t...Windsurf rules for .NET: Nullable Contracts, Async and Endpoints. Structure, data, errors, security, performance, and tests. .NET 10 LTS and .NET 11, Nov 2026.
# .NET Windsurf Rules: Nullable Contracts, Async and Endpoints
## Install
Install the native export at `.devin/rules/dotnet-rules.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# .NET Windsurf Rules: Nullable Contracts, Async and Endpoints
Devin rule for .NET. Install the `.devin/rules` file. The trigger is model decision. Do not also copy it into `.windsurf/rules`.
## Updated for .NET 10 LTS and .NET 11, Nov 2026
Do not upgrade dependencies or the framework version unless the task asks.
.NET 11 includes C# 15 unions and closed hiera...Windsurf rules for Express: Middleware, Routing and Validation. Structure, data, errors, security, performance, and tests. Express 5.3.0, Nov 2026.
# Express Windsurf Rules: Middleware, Routing and Validation
## Install
Install the native export at `.devin/rules/express-rules.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# Express Windsurf Rules: Middleware, Routing and Validation
Devin rule for Express. Install the `.devin/rules` file. The trigger is model decision. Do not also copy it into `.windsurf/rules`.
## Updated for Express 5.3.0, Nov 2026
Do not upgrade dependencies or the framework version unless the task asks.
## Project shape
Middleware is an ordered list. Securit...Review an Express app for middleware order, Express 5 route syntax, validation, and auth. Use for an Express security review. Do not use for a Fastify or NestJS app, or to forward errors twice.
# Express Security Review Skill for Windsurf
## Install
Install the native export at `.devin/skills/express-security-review/SKILL.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# Express Security Review Skill for Windsurf
Devin skill `express-security-review` for Express. Invoke it with `/express-security-review`. Install only `.devin/skills`. This file is not a subagent.
## When to run
Run this review for an Express router, middleware order, or an Express 4 to 5 migration.
## When to leave it
Stop for Fastify, Nest, or another fra...Windsurf rules for FastAPI: Pydantic Models, Dependencies and Async. Structure, data, errors, security, performance, and tests. FastAPI 0.162.5, Nov 2026.
# FastAPI Windsurf Rules: Pydantic Models, Dependencies and Async
## Install
Install the native export at `.devin/rules/fastapi-rules.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# FastAPI Windsurf Rules: Pydantic Models, Dependencies and Async
Devin rule for FastAPI. Install the `.devin/rules` file. The trigger is model decision. Do not also copy it into `.windsurf/rules`.
## Updated for FastAPI 0.162.5, Nov 2026
Do not upgrade dependencies or the framework version unless the task asks.
## Project shape
Routers are split by resou...Review a FastAPI change for Pydantic validation, auth dependencies, and blocking work in async routes. Use for a FastAPI security review. Do not use for a non-FastAPI Python script or to expose a hidden field in a response model.
# FastAPI Security Review Skill for Windsurf
## Install
Install the native export at `.devin/skills/fastapi-security-review/SKILL.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# FastAPI Security Review Skill for Windsurf
Devin skill `fastapi-security-review` for FastAPI. Invoke it with `/fastapi-security-review`. Install only `.devin/skills`. This file is not a subagent.
## When to run
Run this review for a FastAPI route, a Pydantic model, or a request to "check the API auth".
## When to leave it
Stop for a Python script that is n...Windsurf rules for Flutter: Widgets, Async UI and Platform Builds. Structure, data, errors, security, performance, and tests. Flutter 3.50, Nov 2026.
# Flutter Windsurf Rules: Widgets, Async UI and Platform Builds
## Install
Install the native export at `.devin/rules/flutter-rules.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# Flutter Windsurf Rules: Widgets, Async UI and Platform Builds
Devin rule for Flutter. Install the `.devin/rules` file. The trigger is model decision. Do not also copy it into `.windsurf/rules`.
## Updated for Flutter 3.50, Nov 2026
Do not upgrade dependencies or the framework version unless the task asks.
Write for the Flutter version in `pubspec.yaml` and...Write a Flutter widget or unit test for a behavior, including the mounted check after an await. Use when the user asks for Flutter tests. Do not use for a non-Flutter repository or to edit a generated file.
# Flutter Test Writer Skill for Windsurf
## Install
Install the native export at `.devin/skills/flutter-test-writer/SKILL.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# Flutter Test Writer Skill for Windsurf
Devin skill `flutter-test-writer` for Flutter. Invoke it with `/flutter-test-writer`. Install only `.devin/skills`. This file is not a subagent.
## When to run
Run this when the user wants a Flutter test: a widget test, a unit test, or a regression for a UI bug.
## When to leave it
Stop for a non-Flutter repository. Do not ad...Review a Go change for ignored errors, goroutine leaks, and context that is not canceled. Use for a Go code review. Do not use for a non-Go repository or to enable an experimental flag by default.
# Go Code Review Skill for Windsurf
## Install
Install the native export at `.devin/skills/go-code-review/SKILL.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# Go Code Review Skill for Windsurf
Devin skill `go-code-review` for Go. Invoke it with `/go-code-review`. Install only `.devin/skills`. This file is not a subagent.
## When to run
Run this review for a Go change: a handler, a worker, a package, or "check the error paths".
## When to leave it
Stop for a non-Go repository. Do not bump the `go` line in `go.mod` unless the user ...Windsurf rules for Go: Errors, Context and Goroutines. Structure, data, errors, security, performance, and tests. Go 1.27.4, Nov 2026.
# Go Windsurf Rules: Errors, Context and Goroutines
## Install
Install the native export at `.devin/rules/go-rules.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# Go Windsurf Rules: Errors, Context and Goroutines
Devin rule for Go. Install the `.devin/rules` file. The trigger is model decision. Do not also copy it into `.windsurf/rules`.
## Updated for Go 1.27.4, Nov 2026
Do not upgrade dependencies or the framework version unless the task asks.
Go 1.27.4 is the current stable release on `go.dev/dl`. Go 1.26.11 is the other stable l...Review a Kotlin change for coroutine cancellation, lifecycle-aware flows, and null assertions. Use for a Kotlin code review. Do not use for a non-Kotlin repository or to swallow CancellationException.
# Kotlin Code Review Skill for Windsurf
## Install
Install the native export at `.devin/skills/kotlin-code-review/SKILL.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# Kotlin Code Review Skill for Windsurf
Devin skill `kotlin-code-review` for Kotlin. Invoke it with `/kotlin-code-review`. Install only `.devin/skills`. This file is not a subagent.
## When to run
Run this review for a Kotlin coroutine, a Flow, a Compose screen, or an Android lifecycle change.
## When to leave it
Stop for a non-Kotlin repository. Do not upgrade Kotlin...Windsurf rules for Kotlin: Coroutines, Null Safety and Compose. Structure, data, errors, security, performance, and tests. Kotlin 2.4 stable line, Nov 2026.
# Kotlin Windsurf Rules: Coroutines, Null Safety and Compose
## Install
Install the native export at `.devin/rules/kotlin-rules.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# Kotlin Windsurf Rules: Coroutines, Null Safety and Compose
Devin rule for Kotlin. Install the `.devin/rules` file. The trigger is model decision. Do not also copy it into `.windsurf/rules`.
## Updated for Kotlin 2.4, Nov 2026
Do not upgrade dependencies or the framework version unless the task asks.
Stay on the Kotlin version the Gradle build uses. Kotlin 2.4....Windsurf rules for Laravel: Requests, Policies and Eloquent. Structure, data, errors, security, performance, and tests. Laravel 13, Nov 2026.
# Laravel Windsurf Rules: Requests, Policies and Eloquent
## Install
Install the native export at `.devin/rules/laravel-rules.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# Laravel Windsurf Rules: Requests, Policies and Eloquent
Devin rule for Laravel. Install the `.devin/rules` file. The trigger is model decision. Do not also copy it into `.windsurf/rules`.
## Updated for Laravel 13, Nov 2026
Do not upgrade dependencies or the framework version unless the task asks.
Laravel 13 requires PHP 8.3 through 8.5. Read `composer.json` and...Review a Laravel change for policies, Form Request validation, and mass assignment. Use for a Laravel security review. Do not use for a non-Laravel PHP script or to run a migration against production.
# Laravel Security Review Skill for Windsurf
## Install
Install the native export at `.devin/skills/laravel-security-review/SKILL.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# Laravel Security Review Skill for Windsurf
Devin skill `laravel-security-review` for Laravel. Invoke it with `/laravel-security-review`. Install only `.devin/skills`. This file is not a subagent.
## When to run
Run this review for a Laravel controller, Form Request, policy, Eloquent write, or job.
## When to leave it
Stop for PHP that is not Laravel. Do no...Loading all presets…