Agent Skills

by microsoft

Requirements authoring guide for BRD and PRD across Discover, Define, and Govern with canonical templates and handoff contracts

rpi-implement

by microsoft

Execute approved implementation phases, update tracking artifacts, and hand off review-ready results.

rpi-research

by microsoft

Research-only RPI playbook that gathers task evidence, writes dated research artifacts under .copilot-tracking/research/, and hands off planning-ready findings. Use when the user needs evidence, alternatives, or task framing first.

rpi-review

by microsoft

Review-only RPI playbook that validates implementation evidence, checks phase completion, and closes the loop with explicit next steps. Use when the user needs review coverage or acceptance evidence.

vex

by microsoft

OpenVEX v0.2.0 specification reference plus VEX management playbooks - Brought to you by microsoft/hve-core.

owasp-mcp

by microsoft

OWASP MCP Top 10 knowledge base for identifying, assessing, and remediating Model Context Protocol security risks.

powerpoint

🔥🔥🔥🔥✓ VerifiedFreeAdvanced setup

by microsoft

PowerPoint slide deck generation and management using python-pptx with YAML-driven content and styling

python-foundational

by microsoft

Foundational Python best practices, idioms, and code quality fundamentals

vscode-playwright

🔥🔥✓ VerifiedFreeQuick setup

by microsoft

VS Code screenshot capture using Playwright MCP with serve-web for slide decks and documentation

architecture-diagrams

by microsoft

Architecture diagram authoring for cloud infrastructure and declared data catalogs. Use when rendering Azure IaC or DS_CATALOG_V1 relationships as caller-selected ASCII or Mermaid diagrams.

pr-reference

by microsoft

Generates PR reference XML with commit history and unified diffs between branches, with extension and path filtering. Use when creating pull request descriptions, preparing code reviews, analyzing branch changes, discovering work items from diffs, or generating structured diff summaries.

jira

by microsoft

Jira issue workflows for search, issue updates, transitions, comments, and field discovery via the Jira REST API. Use when you need to search with JQL, inspect an issue, create or update work items, move an issue between statuses, post comments, or discover required fields for issue creation.

🔥🔥🔥🔥✓ VerifiedFree

rpi-plan

by microsoft

Create implementation-ready planning artifacts and validation evidence for RPI tasks.

owasp-top-10

by microsoft

OWASP Top 10 for Web Applications (2025) knowledge base for identifying, assessing, and remediating web application security risks.

owasp-llm

by microsoft

OWASP Top 10 for LLM Applications (2025) knowledge base for identifying, assessing, and remediating large language model security risks.

owasp-infrastructure

by microsoft

OWASP Infrastructure Top 10 knowledge base for identifying, assessing, and remediating internal IT infrastructure security risks.

accessibility

by microsoft

Consolidated accessibility skill entrypoint for WCAG 2.2, ARIA Authoring Practices, cognitive accessibility, Section 508, EN 301 549, and the Accessibility Planner workflow.

backlog-templates

by microsoft

Shared work-item templates and conventions for ADO and GitHub backlog handoff across the RAI, Security, SSSC, Accessibility, and Privacy planners

tts-voiceover

by microsoft

Text-to-speech voice-over generation from YAML speaker notes using Azure Speech SDK with SSML pronunciation control

telemetry-foundations

by microsoft

Declarative OpenTelemetry-aligned telemetry vocabulary and instrumentation conventions for traces, metrics, logs, and PII handling

supply-chain-security

by microsoft

Software supply chain security reference for OpenSSF Scorecard, SLSA, Sigstore, SBOM, and posture/backlog taxonomies.

owasp-agentic

by microsoft

OWASP Agentic Security Top 10 knowledge base for identifying, assessing, and remediating AI agent system security risks.

owasp-docker

by microsoft

OWASP Docker Top 6 knowledge base for identifying, assessing, and remediating Docker container security risks.

financial-research

by firecrawl

Pull company financials, SEC filings, and analyst consensus for a public company. Use this skill whenever the user says "10-K", "10-Q", "earnings", "revenue of", "financials for", "analyst rating for", "price target for", or provides a stock ticker. Combines SEC EDGAR for official filings with Yahoo Finance / TipRanks for analyst data. Search + scrape only; no interact needed.

competitor-analysis

🔥🔥🔥✓ VerifiedAccount requiredQuick setup

by firecrawl

Compare two or more companies, products, or platforms across pricing, features, positioning, and docs. Use this skill whenever the user says "compare X vs Y", "how does X stack up against Y", "alternatives to X", "competitive landscape of …", "X vs Y vs Z", or asks for a competitor matrix. Uses search to discover competitors when the user only names a category, then scrape for each competitor's homepage, pricing page, and features/docs. Returns a normalized comparison matrix as JSON.

structured-extraction

by firecrawl

Extract structured data matching a JSON schema from websites. Handles complex nested schemas, arrays, pagination, and validation. Always outputs via formatOutput.

pricing-tracker

🔥🔥🔥✓ VerifiedAccount requiredQuick setup

by firecrawl

Extract and normalize pricing tiers from any SaaS, API, cloud, or LLM vendor's pricing page. Use this skill whenever the user says "pricing for X", "how much does X cost", "pricing tiers", "cost comparison", provides a URL ending in `/pricing` or `/plans`, or asks to monitor pricing over time. Pairs well with `exportSkill` to turn a run into a cron-friendly workflow. Scrape-driven; no interact needed for typical pricing pages.

deep-research

by firecrawl

Multi-source research with source triangulation and fact-checking. Use for any research task requiring 3+ sources.

e-commerce

by firecrawl

Navigate e-commerce sites to extract products, pricing, categories, and inventory. Handles pagination, variants, and JS-heavy storefronts.