Agent Skills
Instruction packs that give your AI agent know-how — some work anywhere, some only with the tool they came with.
✦ Standalone skills3,202
Self-contained. Install one into any project and it works on its own — no other software needed.
🧰 Tool add-ons702
Come bundled with a specific tool and only work together with it — they teach your agent how to operate that tool.
react · Development
1,499 standalone skills
code-review
✓★ 1,245by microsoft
Review code changes from multiple perspectives with context bootstrap, depth-tier rigor, and structured findings output.
vex
✓★ 1,245by microsoft
OpenVEX v0.2.0 specification reference plus VEX management playbooks - Brought to you by microsoft/hve-core.
rpi-review
✓★ 1,245by microsoft
Review-only RPI playbook that validates implementation evidence, checks phase completion, and closes the loop with explicit next steps. Use when the user needs review coverage or acceptance evidence.
rpi-research
✓★ 1,245by microsoft
Research-only RPI playbook that gathers task evidence, writes dated research artifacts under .copilot-tracking/research/, and hands off planning-ready findings. Use when the user needs evidence, alternatives, or task framing first.
documentation
✓★ 1,245by microsoft
Canonical documentation capability for audit, drift, validate, and author modes in hve-core.
secure-by-design
✓★ 1,245by microsoft
Secure by Design principles knowledge base for assessing security-first design, development, and deployment across the software lifecycle.
rpi-plan
✓★ 1,245by microsoft
Create implementation-ready planning artifacts and validation evidence for RPI tasks.
rpi-implement
✓★ 1,245by microsoft
Execute approved implementation phases, update tracking artifacts, and hand off review-ready results.
requirements-author
✓★ 1,245by microsoft
Requirements authoring guide for BRD and PRD across Discover, Define, and Govern with canonical templates and handoff contracts
rai-standards
✓★ 1,245by microsoft
Consolidated Responsible AI standards reference: NIST AI RMF 1.0, AI STRIDE threat-modeling overlay, EU AI Act risk tiers, and an open-standards catalog with phase mapping
rai-planner
✓★ 1,245by microsoft
On-demand RAI planner reference pack covering Phase 1 capture, Phase 2 risk classification, Phase 5 impact assessment, and Phase 6 review and backlog handoff.
dt-coaching-foundation
✓★ 1,245by microsoft
Design Thinking coaching foundation knowledge: coach identity and philosophy, quality and fidelity constraints, method sequencing, coaching state schema, and the canonical deck workflow
privacy-standards
✓★ 1,245by microsoft
Privacy planning reference for data-flow reasoning, standards mapping, and DPIA thresholds
vally-tests
✓★ 1,245by microsoft
Authors Vally conformance tests for prompts, instructions, agents, and skills, including refusals for jailbreak, prompt-injection, harmful-elicitation, TOS, CoC, and PII-extraction stimuli
mural
✓★ 1,245by microsoft
Mural workspace, room, mural, and widget workflows via the Mural REST API exposed through a Python CLI. Use when you need to read or write Mural content or automate widget creation.
dt-curriculum
✓★ 1,245by microsoft
Design Thinking learning curriculum covering nine progressive modules across the full Problem, Solution, and Implementation Space methods plus a shared manufacturing reference scenario for teaching and practice
dt-rpi-integration
✓★ 1,245by microsoft
Design Thinking handoff knowledge for research-ready rpi-research inputs and DT-aware rpi-plan, rpi-implement, and rpi-review context
owasp-infrastructure
✓★ 1,245by microsoft
OWASP Infrastructure Top 10 knowledge base for identifying, assessing, and remediating internal IT infrastructure security risks.
dt-methods
✓★ 1,245by microsoft
Design Thinking method coaching knowledge across all nine methods including per-method techniques, deep expertise, and industry context (energy, financial services, healthcare, manufacturing, nonprofit and social impact, pharmaceuticals and life sciences, professional services, public sector, retail and CPG)
owasp-top-10
✓★ 1,245by microsoft
OWASP Top 10 for Web Applications (2025) knowledge base for identifying, assessing, and remediating web application security risks.
owasp-agentic
✓★ 1,245by microsoft
OWASP Agentic Security Top 10 knowledge base for identifying, assessing, and remediating AI agent system security risks.
python-foundational
✓★ 1,245by microsoft
Foundational Python best practices, idioms, and code quality fundamentals
owasp-mcp
✓★ 1,245by microsoft
OWASP MCP Top 10 knowledge base for identifying, assessing, and remediating Model Context Protocol security risks.
accessibility
✓★ 1,245by microsoft
Consolidated accessibility skill entrypoint for WCAG 2.2, ARIA Authoring Practices, cognitive accessibility, Section 508, EN 301 549, and the Accessibility Planner workflow.
backlog-templates
✓★ 1,245by microsoft
Shared work-item templates and conventions for ADO and GitHub backlog handoff across the RAI, Security, SSSC, Accessibility, and Privacy planners
ios-simulator-skill
★ 1,134by conorluddy
29 production-ready scripts for iOS app testing, building, and automation. Provides semantic UI navigation, build automation, accessibility testing, and simulator lifecycle management. Optimized for AI agents with minimal token output.
kotlin-tooling-java-to-kotlin
★ 909by kotlin
Use when converting Java source files to idiomatic Kotlin, when user mentions "java to kotlin", "j2k", "convert java", "migrate java to kotlin", or when working with .java files that need to become .kt files. Handles framework-aware conversion for Spring, Lombok, Hibernate, Jackson, Micronaut, Quarkus, Dagger/Hilt, RxJava, JUnit, Guice, Retrofit, and Mockito.
kotlin-tooling-agp9-migration
★ 909by kotlin
Migrates Kotlin Multiplatform (KMP) projects to Android Gradle Plugin 9.0+. Handles plugin replacement (com.android.kotlin.multiplatform.library), module splitting, DSL migration, and the new default project structure. Use when upgrading AGP, when build fails due to KMP+AGP incompatibility, or when the user mentions AGP 9.0, android multiplatform plugin, KMP migration, or com.android.kotlin.multiplatform.library.
kotlin-backend-jpa-entity-mapping
★ 909by kotlin
Model Kotlin persistence code correctly for Spring Data JPA and Hibernate. Covers entity design, identity and equality, uniqueness constraints, relationships, fetch plans, and common ORM (Object-Relational Mapping) traps specific to Kotlin. Use when creating or reviewing JPA (Java Persistence API) entities, diagnosing N+1 or LazyInitializationException, placing indexes and uniqueness rules, or preventing Kotlin-specific bugs such as data class entities and broken equals/hashCode.
kotlin-tooling-cocoapods-spm-migration
★ 909by kotlin
Migrate KMP projects from CocoaPods (kotlin("native.cocoapods")) to Swift Package Manager (swiftPMDependencies DSL) — replaces pod() with swiftPackage(), transforms cocoapods.* imports to swiftPMImport.*, and reconfigures the Xcode project.