Agent Skills
Instruction packs that give your AI agent know-how — some work anywhere, some only with the tool they came with.
✦ Standalone skills2,599
Self-contained. Install one into any project and it works on its own — no other software needed.
🧰 Tool add-ons428
Come bundled with a specific tool and only work together with it — they teach your agent how to operate that tool.
🔌 Needs setup first94
Each relies on something you set up separately — such as an app, a command-line tool or an account — and its page names what that is.
mcp-use
2,599 standalone skills
owasp-infrastructure
✓★ 1,245by microsoft
OWASP Infrastructure Top 10 knowledge base for identifying, assessing, and remediating internal IT infrastructure security risks.
owasp-llm
✓★ 1,245by microsoft
OWASP Top 10 for LLM Applications (2025) knowledge base for identifying, assessing, and remediating large language model security risks.
owasp-top-10
✓★ 1,245by microsoft
OWASP Top 10 for Web Applications (2025) knowledge base for identifying, assessing, and remediating web application security risks.
security-planning
✓★ 1,245by microsoft
Security planning reference set for operational buckets, STRIDE analysis, standards mapping, NIST control families, and backlog scaffolding.
architecture-diagrams
✓★ 1,245by microsoft
Architecture diagram authoring for cloud infrastructure and declared data catalogs. Use when rendering Azure IaC or DS_CATALOG_V1 relationships as caller-selected ASCII or Mermaid diagrams.
rpi-plan
✓★ 1,245by microsoft
Create implementation-ready planning artifacts and validation evidence for RPI tasks.
owasp-agentic
✓★ 1,245by microsoft
OWASP Agentic Security Top 10 knowledge base for identifying, assessing, and remediating AI agent system security risks.
owasp-cicd
✓★ 1,245by microsoft
OWASP CI/CD Top 10 knowledge base for identifying, assessing, and remediating CI/CD pipeline security risks.
owasp-docker
✓★ 1,245by microsoft
OWASP Docker Top 6 knowledge base for identifying, assessing, and remediating Docker container security risks.
supply-chain-security
✓★ 1,245by microsoft
Software supply chain security reference for OpenSSF Scorecard, SLSA, Sigstore, SBOM, and posture/backlog taxonomies.
telemetry-foundations
✓★ 1,245by microsoft
Declarative OpenTelemetry-aligned telemetry vocabulary and instrumentation conventions for traces, metrics, logs, and PII handling
tts-voiceover
✓★ 1,245by microsoft
Text-to-speech voice-over generation from YAML speaker notes using Azure Speech SDK with SSML pronunciation control
backlog-templates
✓★ 1,245by microsoft
Shared work-item templates and conventions for ADO and GitHub backlog handoff across the RAI, Security, SSSC, Accessibility, and Privacy planners
secure-by-design
✓★ 1,245by microsoft
Secure by Design principles knowledge base for assessing security-first design, development, and deployment across the software lifecycle.
video-to-gif
✓★ 1,245by microsoft
Video-to-GIF conversion with FFmpeg two-pass optimization
gh-code-scanning
✓★ 1,245by microsoft
Retrieves and groups GitHub code scanning alerts by rule and severity using the gh CLI
gitlab
✓★ 1,245by microsoft
Manage GitLab merge requests and pipelines with a Python CLI
adr-author
✓★ 1,245by microsoft
Authoring skill for Architecture Decision Records (ADRs) supporting capture, from-planner-handoff, and adopt-template entry modes with selectable Y-Statement or MADR v4.0.0 output templates, supersession lineage, and ASR trigger evaluation.
caveman
✓★ 1,245by microsoft
Ultra-compressed response style that reduces output token count while preserving technical accuracy, with intensity levels and auto-clarity safety rules
code-review
✓★ 1,245by microsoft
Review code changes from multiple perspectives with context bootstrap, depth-tier rigor, and structured findings output.
documentation
✓★ 1,245by microsoft
Canonical documentation capability for audit, drift, validate, and author modes in hve-core.
dt-coaching-foundation
✓★ 1,245by microsoft
Design Thinking coaching foundation knowledge: coach identity and philosophy, quality and fidelity constraints, method sequencing, coaching state schema, and the canonical deck workflow
dt-curriculum
✓★ 1,245by microsoft
Design Thinking learning curriculum covering nine progressive modules across the full Problem, Solution, and Implementation Space methods plus a shared manufacturing reference scenario for teaching and practice
dt-rpi-integration
✓★ 1,245by microsoft
Design Thinking handoff knowledge for research-ready rpi-research inputs and DT-aware rpi-plan, rpi-implement, and rpi-review context
dt-methods
✓★ 1,245by microsoft
Design Thinking method coaching knowledge across all nine methods including per-method techniques, deep expertise, and industry context (energy, financial services, healthcare, manufacturing, nonprofit and social impact, pharmaceuticals and life sciences, professional services, public sector, retail and CPG)
mural
✓★ 1,245by microsoft
Mural workspace, room, mural, and widget workflows via the Mural REST API exposed through a Python CLI. Use when you need to read or write Mural content or automate widget creation.
privacy-standards
✓★ 1,245by microsoft
Privacy planning reference for data-flow reasoning, standards mapping, and DPIA thresholds
rai-planner
✓★ 1,245by microsoft
On-demand RAI planner reference pack covering Phase 1 capture, Phase 2 risk classification, Phase 5 impact assessment, and Phase 6 review and backlog handoff.
rai-standards
✓★ 1,245by microsoft
Consolidated Responsible AI standards reference: NIST AI RMF 1.0, AI STRIDE threat-modeling overlay, EU AI Act risk tiers, and an open-standards catalog with phase mapping
requirements-author
✓★ 1,245by microsoft
Requirements authoring guide for BRD and PRD across Discover, Define, and Govern with canonical templates and handoff contracts