Agent Skills

by microsoft

Review-only RPI playbook that validates implementation evidence, checks phase completion, and closes the loop with explicit next steps. Use when the user needs review coverage or acceptance evidence.

rpi-research

by microsoft

Research-only RPI playbook that gathers task evidence, writes dated research artifacts under .copilot-tracking/research/, and hands off planning-ready findings. Use when the user needs evidence, alternatives, or task framing first.

rpi-implement

by microsoft

Execute approved implementation phases, update tracking artifacts, and hand off review-ready results.

requirements-author

by microsoft

Requirements authoring guide for BRD and PRD across Discover, Define, and Govern with canonical templates and handoff contracts

rai-standards

by microsoft

Consolidated Responsible AI standards reference: NIST AI RMF 1.0, AI STRIDE threat-modeling overlay, EU AI Act risk tiers, and an open-standards catalog with phase mapping

rai-planner

by microsoft

On-demand RAI planner reference pack covering Phase 1 capture, Phase 2 risk classification, Phase 5 impact assessment, and Phase 6 review and backlog handoff.

privacy-standards

by microsoft

Privacy planning reference for data-flow reasoning, standards mapping, and DPIA thresholds

mural

by microsoft

Mural workspace, room, mural, and widget workflows via the Mural REST API exposed through a Python CLI. Use when you need to read or write Mural content or automate widget creation.

dt-methods

by microsoft

Design Thinking method coaching knowledge across all nine methods including per-method techniques, deep expertise, and industry context (energy, financial services, healthcare, manufacturing, nonprofit and social impact, pharmaceuticals and life sciences, professional services, public sector, retail and CPG)

dt-curriculum

by microsoft

Design Thinking learning curriculum covering nine progressive modules across the full Problem, Solution, and Implementation Space methods plus a shared manufacturing reference scenario for teaching and practice

dt-coaching-foundation

by microsoft

Design Thinking coaching foundation knowledge: coach identity and philosophy, quality and fidelity constraints, method sequencing, coaching state schema, and the canonical deck workflow

documentation

by microsoft

Canonical documentation capability for audit, drift, validate, and author modes in hve-core.

code-review

by microsoft

Review code changes from multiple perspectives with context bootstrap, depth-tier rigor, and structured findings output.

caveman

by microsoft

Ultra-compressed response style that reduces output token count while preserving technical accuracy, with intensity levels and auto-clarity safety rules

adr-author

by microsoft

Authoring skill for Architecture Decision Records (ADRs) supporting capture, from-planner-handoff, and adopt-template entry modes with selectable Y-Statement or MADR v4.0.0 output templates, supersession lineage, and ASR trigger evaluation.

gitlab

by microsoft

Manage GitLab merge requests and pipelines with a Python CLI

🔥🔥🔥✓ VerifiedFree

gh-code-scanning

by microsoft

Retrieves and groups GitHub code scanning alerts by rule and severity using the gh CLI

🔥🔥🔥✓ VerifiedFree

vally-tests

by microsoft

Authors Vally conformance tests for prompts, instructions, agents, and skills, including refusals for jailbreak, prompt-injection, harmful-elicitation, TOS, CoC, and PII-extraction stimuli

owasp-agentic

by microsoft

OWASP Agentic Security Top 10 knowledge base for identifying, assessing, and remediating AI agent system security risks.

owasp-cicd

by microsoft

OWASP CI/CD Top 10 knowledge base for identifying, assessing, and remediating CI/CD pipeline security risks.

owasp-docker

by microsoft

OWASP Docker Top 6 knowledge base for identifying, assessing, and remediating Docker container security risks.

secure-by-design

by microsoft

Secure by Design principles knowledge base for assessing security-first design, development, and deployment across the software lifecycle.

security-planning

by microsoft

Security planning reference set for operational buckets, STRIDE analysis, standards mapping, NIST control families, and backlog scaffolding.

deep-research

🔥🔥🔥✓ VerifiedFreeQuick setup

by firecrawl

Multi-source research with source triangulation and fact-checking. Use for any research task requiring 3+ sources.

e-commerce

🔥🔥🔥✓ VerifiedFreeQuick setup

by firecrawl

Navigate e-commerce sites to extract products, pricing, categories, and inventory. Handles pagination, variants, and JS-heavy storefronts.

competitor-analysis

🔥🔥🔥✓ VerifiedAccount requiredQuick setup

by firecrawl

Compare two or more companies, products, or platforms across pricing, features, positioning, and docs. Use this skill whenever the user says "compare X vs Y", "how does X stack up against Y", "alternatives to X", "competitive landscape of …", "X vs Y vs Z", or asks for a competitor matrix. Uses search to discover competitors when the user only names a category, then scrape for each competitor's homepage, pricing page, and features/docs. Returns a normalized comparison matrix as JSON.

financial-research

🔥🔥🔥✓ VerifiedFreeQuick setup

by firecrawl

Pull company financials, SEC filings, and analyst consensus for a public company. Use this skill whenever the user says "10-K", "10-Q", "earnings", "revenue of", "financials for", "analyst rating for", "price target for", or provides a stock ticker. Combines SEC EDGAR for official filings with Yahoo Finance / TipRanks for analyst data. Search + scrape only; no interact needed.

structured-extraction

by firecrawl

Extract structured data matching a JSON schema from websites. Handles complex nested schemas, arrays, pagination, and validation. Always outputs via formatOutput.

pricing-tracker