Agent Skills

dt-methods

✓★ 1,245

by microsoft

Design Thinking method coaching knowledge across all nine methods including per-method techniques, deep expertise, and industry context (energy, financial services, healthcare, manufacturing, nonprofit and social impact, pharmaceuticals and life sciences, professional services, public sector, retail and CPG)

mural

✓★ 1,245

by microsoft

Mural workspace, room, mural, and widget workflows via the Mural REST API exposed through a Python CLI. Use when you need to read or write Mural content or automate widget creation.

privacy-standards

✓★ 1,245

by microsoft

Privacy planning reference for data-flow reasoning, standards mapping, and DPIA thresholds

rai-planner

✓★ 1,245

by microsoft

On-demand RAI planner reference pack covering Phase 1 capture, Phase 2 risk classification, Phase 5 impact assessment, and Phase 6 review and backlog handoff.

documentation

✓★ 1,245

by microsoft

Canonical documentation capability for audit, drift, validate, and author modes in hve-core.

gitlab

✓★ 1,245

by microsoft

Manage GitLab merge requests and pipelines with a Python CLI

gh-code-scanning

✓★ 1,245

by microsoft

Retrieves and groups GitHub code scanning alerts by rule and severity using the gh CLI

rpi-review

✓★ 1,245

by microsoft

Review-only RPI playbook that validates implementation evidence, checks phase completion, and closes the loop with explicit next steps. Use when the user needs review coverage or acceptance evidence.

vex

✓★ 1,245

by microsoft

OpenVEX v0.2.0 specification reference plus VEX management playbooks - Brought to you by microsoft/hve-core.

backlog-templates

✓★ 1,245

by microsoft

Shared work-item templates and conventions for ADO and GitHub backlog handoff across the RAI, Security, SSSC, Accessibility, and Privacy planners

security-planning

✓★ 1,245

by microsoft

Security planning reference set for operational buckets, STRIDE analysis, standards mapping, NIST control families, and backlog scaffolding.

owasp-mcp

✓★ 1,245

by microsoft

OWASP MCP Top 10 knowledge base for identifying, assessing, and remediating Model Context Protocol security risks.

accessibility

✓★ 1,245

by microsoft

Consolidated accessibility skill entrypoint for WCAG 2.2, ARIA Authoring Practices, cognitive accessibility, Section 508, EN 301 549, and the Accessibility Planner workflow.

powerpoint

✓★ 1,245

by microsoft

PowerPoint slide deck generation and management using python-pptx with YAML-driven content and styling

python-foundational

✓★ 1,245

by microsoft

Foundational Python best practices, idioms, and code quality fundamentals

architecture-diagrams

✓★ 1,245

by microsoft

Architecture diagram authoring for cloud infrastructure and declared data catalogs. Use when rendering Azure IaC or DS_CATALOG_V1 relationships as caller-selected ASCII or Mermaid diagrams.

vscode-playwright

✓★ 1,245

by microsoft

VS Code screenshot capture using Playwright MCP with serve-web for slide decks and documentation

rai-standards

✓★ 1,245

by microsoft

Consolidated Responsible AI standards reference: NIST AI RMF 1.0, AI STRIDE threat-modeling overlay, EU AI Act risk tiers, and an open-standards catalog with phase mapping

owasp-top-10

✓★ 1,245

by microsoft

OWASP Top 10 for Web Applications (2025) knowledge base for identifying, assessing, and remediating web application security risks.

owasp-llm

✓★ 1,245

by microsoft

OWASP Top 10 for LLM Applications (2025) knowledge base for identifying, assessing, and remediating large language model security risks.

owasp-infrastructure

✓★ 1,245

by microsoft

OWASP Infrastructure Top 10 knowledge base for identifying, assessing, and remediating internal IT infrastructure security risks.

requirements-author

✓★ 1,245

by microsoft

Requirements authoring guide for BRD and PRD across Discover, Define, and Govern with canonical templates and handoff contracts

rpi-implement

✓★ 1,245

by microsoft

Execute approved implementation phases, update tracking artifacts, and hand off review-ready results.

rpi-research

✓★ 1,245

by microsoft

Research-only RPI playbook that gathers task evidence, writes dated research artifacts under .copilot-tracking/research/, and hands off planning-ready findings. Use when the user needs evidence, alternatives, or task framing first.

tts-voiceover

✓★ 1,245

by microsoft

Text-to-speech voice-over generation from YAML speaker notes using Azure Speech SDK with SSML pronunciation control

vally-tests

✓★ 1,245

by microsoft

Authors Vally conformance tests for prompts, instructions, agents, and skills, including refusals for jailbreak, prompt-injection, harmful-elicitation, TOS, CoC, and PII-extraction stimuli

pr-reference

✓★ 1,245

by microsoft

Generates PR reference XML with commit history and unified diffs between branches, with extension and path filtering. Use when creating pull request descriptions, preparing code reviews, analyzing branch changes, discovering work items from diffs, or generating structured diff summaries.

competitor-analysis

✓★ 1,129

by firecrawl

Compare two or more companies, products, or platforms across pricing, features, positioning, and docs. Use this skill whenever the user says "compare X vs Y", "how does X stack up against Y", "alternatives to X", "competitive landscape of …", "X vs Y vs Z", or asks for a competitor matrix. Uses search to discover competitors when the user only names a category, then scrape for each competitor's homepage, pricing page, and features/docs. Returns a normalized comparison matrix as JSON.

e-commerce

✓★ 1,129

by firecrawl

Navigate e-commerce sites to extract products, pricing, categories, and inventory. Handles pagination, variants, and JS-heavy storefronts.

structured-extraction

✓★ 1,129

by firecrawl

Extract structured data matching a JSON schema from websites. Handles complex nested schemas, arrays, pagination, and validation. Always outputs via formatOutput.