Agent Skills

expo-ui

✓★ 2,160

by expo

Framework (OSS). Build native UI with the @expo/ui package: real SwiftUI on iOS and Jetpack Compose on Android. Default to @expo/ui for sheets (BottomSheet), pickers, sliders, toggles, menus, and grouped-form sections — do NOT reach for Reanimated, @gorhom/bottom-sheet, or RN built-in Picker/Switch; use @expo/ui instead. Fall back to RN built-ins only when @expo/ui is missing the component. NOTE: @expo/ui List renders native grouped rows like an iOS Settings screen — it is NOT a virtualized list; use FlatList/FlashList for large datasets. Covers universal components (Host, Column, Row, Button, Text, List, BottomSheet, FieldGroup, Switch, Slider, Picker, Menu), drop-in replacements for RN community libraries, and platform-specific SwiftUI/Jetpack Compose trees. Not for Expo Router navigation, Reanimated, or data fetching.

expo-module

✓★ 2,160

by expo

Guide for creating and writing Expo native modules and views using the Expo Modules API (Swift, Kotlin, TypeScript). Covers module definition DSL, native views, shared objects, config plugins, lifecycle hooks, autolinking, and type system. Use when building or modifying native modules for Expo.

stripe-best-practices

✓★ 1,644

by stripe

Guides Stripe integration decisions across development and test environment planning (separate sandboxes vs the shared test mode sandbox), API selection (Checkout Sessions vs PaymentIntents), Connect platform setup (Accounts v2, controller properties), billing/subscriptions, tax and registrations (Stripe Tax, automatic_tax, product tax codes), Treasury financial accounts, integration options (Checkout, Payment Element), migrating from deprecated Stripe APIs, and security best practices (API key management, API key permissions, webhooks, OAuth). Use when planning, building, modifying, testing, or reviewing any Stripe integration, including choosing a development environment, accepting payments, building marketplaces, integrating Stripe, processing payments, setting up subscriptions, collecting sales tax, VAT, or GST, creating connected accounts, or implementing secure key handling.

upgrade-stripe

✓★ 1,644

by Stripe

Guide for upgrading Stripe API versions and SDKs

connect-recommend

✓★ 1,644

by stripe

Use this skill when the user asks about Stripe Connect configuration, charge patterns, Dashboard access, or how to get started with Connect, is building a marketplace, platform, multi-vendor store, gig platform, or subscription platform, needs to pay out sellers, vendors, or providers, mentions split payments, revenue sharing, multi-party payments, or similar payment distribution concepts, provides a company URL or business description for a recommendation, builds SaaS that routes money between parties (for example, POS, booking, invoicing — not operational SaaS without payment routing), asks about onboarding or KYC for merchants, sellers, and vendors, mentions connected account Dashboard or responsibility configurations, or asks about payment flows, white-label payments, or embedded payments.

secure-by-design

✓★ 1,245

by microsoft

Secure by Design principles knowledge base for assessing security-first design, development, and deployment across the software lifecycle.

dt-coaching-foundation

✓★ 1,245

by microsoft

Design Thinking coaching foundation knowledge: coach identity and philosophy, quality and fidelity constraints, method sequencing, coaching state schema, and the canonical deck workflow

jira

✓★ 1,245

by microsoft

Jira issue workflows for search, issue updates, transitions, comments, and field discovery via the Jira REST API. Use when you need to search with JQL, inspect an issue, create or update work items, move an issue between statuses, post comments, or discover required fields for issue creation.

documentation

✓★ 1,245

by microsoft

Canonical documentation capability for audit, drift, validate, and author modes in hve-core.

code-review

✓★ 1,245

by microsoft

Review code changes from multiple perspectives with context bootstrap, depth-tier rigor, and structured findings output.

owasp-infrastructure

✓★ 1,245

by microsoft

OWASP Infrastructure Top 10 knowledge base for identifying, assessing, and remediating internal IT infrastructure security risks.

owasp-llm

✓★ 1,245

by microsoft

OWASP Top 10 for LLM Applications (2025) knowledge base for identifying, assessing, and remediating large language model security risks.

owasp-top-10

✓★ 1,245

by microsoft

OWASP Top 10 for Web Applications (2025) knowledge base for identifying, assessing, and remediating web application security risks.

caveman

✓★ 1,245

by microsoft

Ultra-compressed response style that reduces output token count while preserving technical accuracy, with intensity levels and auto-clarity safety rules

adr-author

✓★ 1,245

by microsoft

Authoring skill for Architecture Decision Records (ADRs) supporting capture, from-planner-handoff, and adopt-template entry modes with selectable Y-Statement or MADR v4.0.0 output templates, supersession lineage, and ASR trigger evaluation.

gitlab

✓★ 1,245

by microsoft

Manage GitLab merge requests and pipelines with a Python CLI

accessibility

✓★ 1,245

by microsoft

Consolidated accessibility skill entrypoint for WCAG 2.2, ARIA Authoring Practices, cognitive accessibility, Section 508, EN 301 549, and the Accessibility Planner workflow.

gh-code-scanning

✓★ 1,245

by microsoft

Retrieves and groups GitHub code scanning alerts by rule and severity using the gh CLI

supply-chain-security

✓★ 1,245

by microsoft

Software supply chain security reference for OpenSSF Scorecard, SLSA, Sigstore, SBOM, and posture/backlog taxonomies.

security-planning

✓★ 1,245

by microsoft

Security planning reference set for operational buckets, STRIDE analysis, standards mapping, NIST control families, and backlog scaffolding.

owasp-agentic

✓★ 1,245

by microsoft

OWASP Agentic Security Top 10 knowledge base for identifying, assessing, and remediating AI agent system security risks.

backlog-templates

✓★ 1,245

by microsoft

Shared work-item templates and conventions for ADO and GitHub backlog handoff across the RAI, Security, SSSC, Accessibility, and Privacy planners

owasp-cicd

✓★ 1,245

by microsoft

OWASP CI/CD Top 10 knowledge base for identifying, assessing, and remediating CI/CD pipeline security risks.

tts-voiceover

✓★ 1,245

by microsoft

Text-to-speech voice-over generation from YAML speaker notes using Azure Speech SDK with SSML pronunciation control

telemetry-foundations

✓★ 1,245

by microsoft

Declarative OpenTelemetry-aligned telemetry vocabulary and instrumentation conventions for traces, metrics, logs, and PII handling

architecture-diagrams

✓★ 1,245

by microsoft

Architecture diagram authoring for cloud infrastructure and declared data catalogs. Use when rendering Azure IaC or DS_CATALOG_V1 relationships as caller-selected ASCII or Mermaid diagrams.

python-foundational

✓★ 1,245

by microsoft

Foundational Python best practices, idioms, and code quality fundamentals

owasp-docker

✓★ 1,245

by microsoft

OWASP Docker Top 6 knowledge base for identifying, assessing, and remediating Docker container security risks.

powerpoint

✓★ 1,245

by microsoft

PowerPoint slide deck generation and management using python-pptx with YAML-driven content and styling

vscode-playwright

✓★ 1,245

by microsoft

VS Code screenshot capture using Playwright MCP with serve-web for slide decks and documentation