Agent Skills

code-review

✓★ 1,245

by microsoft

Review code changes from multiple perspectives with context bootstrap, depth-tier rigor, and structured findings output.

rpi-review

✓★ 1,245

by microsoft

Review-only RPI playbook that validates implementation evidence, checks phase completion, and closes the loop with explicit next steps. Use when the user needs review coverage or acceptance evidence.

dt-rpi-integration

✓★ 1,245

by microsoft

Design Thinking handoff knowledge for research-ready rpi-research inputs and DT-aware rpi-plan, rpi-implement, and rpi-review context

rpi-research

✓★ 1,245

by microsoft

Research-only RPI playbook that gathers task evidence, writes dated research artifacts under .copilot-tracking/research/, and hands off planning-ready findings. Use when the user needs evidence, alternatives, or task framing first.

rpi-plan

✓★ 1,245

by microsoft

Create implementation-ready planning artifacts and validation evidence for RPI tasks.

secure-by-design

✓★ 1,245

by microsoft

Secure by Design principles knowledge base for assessing security-first design, development, and deployment across the software lifecycle.

dt-methods

✓★ 1,245

by microsoft

Design Thinking method coaching knowledge across all nine methods including per-method techniques, deep expertise, and industry context (energy, financial services, healthcare, manufacturing, nonprofit and social impact, pharmaceuticals and life sciences, professional services, public sector, retail and CPG)

rpi-implement

✓★ 1,245

by microsoft

Execute approved implementation phases, update tracking artifacts, and hand off review-ready results.

requirements-author

✓★ 1,245

by microsoft

Requirements authoring guide for BRD and PRD across Discover, Define, and Govern with canonical templates and handoff contracts

mural

✓★ 1,245

by microsoft

Mural workspace, room, mural, and widget workflows via the Mural REST API exposed through a Python CLI. Use when you need to read or write Mural content or automate widget creation.

rai-standards

✓★ 1,245

by microsoft

Consolidated Responsible AI standards reference: NIST AI RMF 1.0, AI STRIDE threat-modeling overlay, EU AI Act risk tiers, and an open-standards catalog with phase mapping

backlog-templates

✓★ 1,245

by microsoft

Shared work-item templates and conventions for ADO and GitHub backlog handoff across the RAI, Security, SSSC, Accessibility, and Privacy planners

telemetry-foundations

✓★ 1,245

by microsoft

Declarative OpenTelemetry-aligned telemetry vocabulary and instrumentation conventions for traces, metrics, logs, and PII handling

supply-chain-security

✓★ 1,245

by microsoft

Software supply chain security reference for OpenSSF Scorecard, SLSA, Sigstore, SBOM, and posture/backlog taxonomies.

vscode-playwright

✓★ 1,245

by microsoft

VS Code screenshot capture using Playwright MCP with serve-web for slide decks and documentation

adr-author

✓★ 1,245

by microsoft

Authoring skill for Architecture Decision Records (ADRs) supporting capture, from-planner-handoff, and adopt-template entry modes with selectable Y-Statement or MADR v4.0.0 output templates, supersession lineage, and ASR trigger evaluation.

gitlab

✓★ 1,245

by microsoft

Manage GitLab merge requests and pipelines with a Python CLI

vally-tests

✓★ 1,245

by microsoft

Authors Vally conformance tests for prompts, instructions, agents, and skills, including refusals for jailbreak, prompt-injection, harmful-elicitation, TOS, CoC, and PII-extraction stimuli

security-planning

✓★ 1,245

by microsoft

Security planning reference set for operational buckets, STRIDE analysis, standards mapping, NIST control families, and backlog scaffolding.

gh-code-scanning

✓★ 1,245

by microsoft

Retrieves and groups GitHub code scanning alerts by rule and severity using the gh CLI

privacy-standards

✓★ 1,245

by microsoft

Privacy planning reference for data-flow reasoning, standards mapping, and DPIA thresholds

python-foundational

✓★ 1,245

by microsoft

Foundational Python best practices, idioms, and code quality fundamentals

owasp-infrastructure

✓★ 1,245

by microsoft

OWASP Infrastructure Top 10 knowledge base for identifying, assessing, and remediating internal IT infrastructure security risks.

owasp-llm

✓★ 1,245

by microsoft

OWASP Top 10 for LLM Applications (2025) knowledge base for identifying, assessing, and remediating large language model security risks.

owasp-top-10

✓★ 1,245

by microsoft

OWASP Top 10 for Web Applications (2025) knowledge base for identifying, assessing, and remediating web application security risks.

documentation

✓★ 1,245

by microsoft

Canonical documentation capability for audit, drift, validate, and author modes in hve-core.

accessibility

✓★ 1,245

by microsoft

Consolidated accessibility skill entrypoint for WCAG 2.2, ARIA Authoring Practices, cognitive accessibility, Section 508, EN 301 549, and the Accessibility Planner workflow.

owasp-agentic

✓★ 1,245

by microsoft

OWASP Agentic Security Top 10 knowledge base for identifying, assessing, and remediating AI agent system security risks.

dt-coaching-foundation

✓★ 1,245

by microsoft

Design Thinking coaching foundation knowledge: coach identity and philosophy, quality and fidelity constraints, method sequencing, coaching state schema, and the canonical deck workflow

owasp-mcp

✓★ 1,245

by microsoft

OWASP MCP Top 10 knowledge base for identifying, assessing, and remediating Model Context Protocol security risks.