The 8 Best Windsurf Rules

Ranked by quality, maintenance and a safety scan of every file · Updated October 2026

Rules files for the Windsurf editor's agent. We compared 8 Windsurf Rules that pass our quality bar, 86% of which came up clean on our safety scan; these are the top 8, no more than three from any one repository.

1
narrator-ai-cli-skill
by NarratorAI-Studio
AI 解说大师 — Agent skill；封装 narrator-ai-cli 供 Claude/Codex 等工具调用
Quality 86/100Safety scan clean★ 3,065Updated 2026-07-05
Why it is here: clean safety scan; 3,065 GitHub stars.
```
npx skills add NarratorAI-Studio/narrator-ai-cli-skill
```
2
Vibe Coding Mastery
by LeoYeAI
The complete operating system for building software with AI. From first prompt to production deployment — prompting frameworks, architecture patterns, testing strategies, debugging playbooks, and production graduation checklists.
Quality 90/100Safety scan clean★ 2,149Updated 2026-07-20
Why it is here: highest quality score in this list; clean safety scan; 2,149 GitHub stars.
```
npx skills add LeoYeAI/openclaw-master-skills --skill "Vibe Coding Mastery"
```
3
agentaudit-skill
by LeoYeAI
Automatic security gate that checks packages against a vulnerability database before installation. Use before any npm install, pip install, yarn add, or package manager operation.
Quality 90/100Safety scan clean★ 2,149Updated 2026-07-20
Why it is here: highest quality score in this list; clean safety scan; 2,149 GitHub stars.
```
npx skills add LeoYeAI/openclaw-master-skills --skill agentaudit-skill
```
4
skill-scanner
by LeoYeAI
Scan any agent skill for security risks before you install or use it. Powered by Tencent Zhuque Lab A.I.G (AI-Infra-Guard). 100% local static analysis — no file contents or credentials leave your device. Compatible with CodeBuddy, Cursor, Windsurf, Claude Code, OpenClaw and more.
Quality 90/100Safety scan clean★ 2,149Updated 2026-07-20
Why it is here: highest quality score in this list; clean safety scan; 2,149 GitHub stars.
```
npx skills add LeoYeAI/openclaw-master-skills --skill skill-scanner
```
5
product-manager-skills
by Digidai
PM skill for Claude Code, Codex, Cursor, and Windsurf: diagnose SaaS metrics, critique PRDs, plan roadmaps, run discovery, and coach PM career transitions.
Quality 84/100Safety scan clean★ 191Updated 2026-04-12
Why it is here: clean safety scan.
```
npx skills add Digidai/product-manager-skills
```
6
ocr
by spencermarx
AI-powered multi-agent code review. Simulates a team of Principal Engineers reviewing code from different perspectives
Quality 83/100Not yet scanned★ 368Updated 2026-07-28
```
npx skills add spencermarx/open-code-review --skill ocr
```
7
humanize-writing-skill
by lguz
Rewrite AI-generated text to sound human. 3-pass editing system with 36+ banned words, 10 structural patterns, and a quality checklist. Works with any LLM — Claude, ChatGPT, Gemini, Cursor, Windsurf. Also available as a Claude Code plugin.
Quality 77/100Safety scan clean★ 58Updated 2026-03-12
Why it is here: clean safety scan.
```
npx skills add lguz/humanize-writing-skill
```
8
Aurakit
by smorky850612
One command. Full stack. Zero compromise. — All-in-one Claude Code skill with 33 modes, 6-layer security, 23 hooks, and 75% token savings. Works on Codex, Cursor, Manus, Windsurf.
Quality 73/100Safety notes★ 43Updated 2026-04-16
Why it is here: safety notes worth reading before install.
```
npx skills add smorky850612/Aurakit
```

Side by side

#	Name	Quality	Safety	Stars	Updated
1	narrator-ai-cli-skill	86	Clean	3,065	2026-07-05
2	Vibe Coding Mastery	90	Clean	2,149	2026-07-20
3	agentaudit-skill	90	Clean	2,149	2026-07-20
4	skill-scanner	90	Clean	2,149	2026-07-20
5	product-manager-skills	84	Clean	191	2026-04-12
6	ocr	83	Pending	368	2026-07-28
7	humanize-writing-skill	77	Clean	58	2026-03-12
8	Aurakit	73	Notes	43	2026-04-16

How we rank

Only skills we have read make the list: the file itself was fetched, it has a real description, it scores at least 55 of 100 on quality, its source still exists, its repository has at least 20 GitHub stars, and our safety scan found nothing high-risk. The order then follows adoption (GitHub stars, on a log scale), how squarely it fits this topic, and its quality score (how substantial and well structured the file is and how recently it changed), moved up for a clean safety scan and for real installs through the SkillAgent MCP server, and down for safety notes. At most three come from any one repository, and tools sold on evading bot detection are never listed. We do not rank by install counts reported by a command-line tool: they are easy to inflate, and our research found repositories with no stars claiming hundreds of thousands of installs. The list is recomputed on every visit.

Questions

What is the best Windsurf Rule?

narrator-ai-cli-skill by NarratorAI-Studio ranks first: clean safety scan, 3,065 GitHub stars. The full ranking above lists 8 alternatives with their trade-offs.

How do I install one?

Each entry shows a one-line command. `npx skills add` installs a skill for Claude Code, Cursor, Codex, Gemini CLI and other agents that read skill files.

Are these safe to install?

Every file is scanned for instructions that work against you: hidden text, data sent to outside servers, disabled approval prompts, leaked keys. Skills with a warning are never listed here, and 86% of the 8 we compared for this guide came up clean. Read a skill before installing it all the same: it runs with your permissions.