Agent Skills
Instruction packs for your AI agent — browse standalone skills, tool add-ons and skills that need setup first.
✦ Standalone skills2,358
Listed for general use, with no separate prerequisite named.
🧰 Tool add-ons426
Listed as skills bundled with a specific tool, with no separate prerequisite named.
🔌 Needs setup first88
Each relies on something you set up separately — such as an app, a command-line tool or an account — and its page names what that is.
vercel
2,358 standalone skills
supply-chain-security
✓★ 1,245by microsoft
Software supply chain security reference for OpenSSF Scorecard, SLSA, Sigstore, SBOM, and posture/backlog taxonomies.
telemetry-foundations
✓★ 1,245by microsoft
Declarative OpenTelemetry-aligned telemetry vocabulary and instrumentation conventions for traces, metrics, logs, and PII handling
tts-voiceover
✓★ 1,245by microsoft
Text-to-speech voice-over generation from YAML speaker notes using Azure Speech SDK with SSML pronunciation control
vally-tests
✓★ 1,245by microsoft
Authors Vally conformance tests for prompts, instructions, agents, and skills, including refusals for jailbreak, prompt-injection, harmful-elicitation, TOS, CoC, and PII-extraction stimuli
vex
✓★ 1,245by microsoft
OpenVEX v0.2.0 specification reference plus VEX management playbooks - Brought to you by microsoft/hve-core.
jira
✓★ 1,245by microsoft
Jira issue workflows for search, issue updates, transitions, comments, and field discovery via the Jira REST API. Use when you need to search with JQL, inspect an issue, create or update work items, move an issue between statuses, post comments, or discover required fields for issue creation.
owasp-agentic
✓★ 1,245by microsoft
OWASP Agentic Security Top 10 knowledge base for identifying, assessing, and remediating AI agent system security risks.
owasp-cicd
✓★ 1,245by microsoft
OWASP CI/CD Top 10 knowledge base for identifying, assessing, and remediating CI/CD pipeline security risks.
owasp-docker
✓★ 1,245by microsoft
OWASP Docker Top 6 knowledge base for identifying, assessing, and remediating Docker container security risks.
owasp-infrastructure
✓★ 1,245by microsoft
OWASP Infrastructure Top 10 knowledge base for identifying, assessing, and remediating internal IT infrastructure security risks.
owasp-llm
✓★ 1,245by microsoft
OWASP Top 10 for LLM Applications (2025) knowledge base for identifying, assessing, and remediating large language model security risks.
owasp-mcp
✓★ 1,245by microsoft
OWASP MCP Top 10 knowledge base for identifying, assessing, and remediating Model Context Protocol security risks.
owasp-top-10
✓★ 1,245by microsoft
OWASP Top 10 for Web Applications (2025) knowledge base for identifying, assessing, and remediating web application security risks.
powerpoint
✓★ 1,245by microsoft
PowerPoint slide deck generation and management using python-pptx with YAML-driven content and styling
pr-reference
✓★ 1,245by microsoft
Generates PR reference XML with commit history and unified diffs between branches, with extension and path filtering. Use when creating pull request descriptions, preparing code reviews, analyzing branch changes, discovering work items from diffs, or generating structured diff summaries.
python-foundational
✓★ 1,245by microsoft
Foundational Python best practices, idioms, and code quality fundamentals
secure-by-design
✓★ 1,245by microsoft
Secure by Design principles knowledge base for assessing security-first design, development, and deployment across the software lifecycle.
video-to-gif
✓★ 1,245by microsoft
Video-to-GIF conversion with FFmpeg two-pass optimization
vscode-playwright
✓★ 1,245by microsoft
VS Code screenshot capture using Playwright MCP with serve-web for slide decks and documentation
ios-simulator-skill
★ 1,134by conorluddy
29 production-ready scripts for iOS app testing, building, and automation. Provides semantic UI navigation, build automation, accessibility testing, and simulator lifecycle management. Optimized for AI agents with minimal token output.
competitor-analysis
✓★ 1,129by firecrawl
Compare two or more companies, products, or platforms across pricing, features, positioning, and docs. Use this skill whenever the user says "compare X vs Y", "how does X stack up against Y", "alternatives to X", "competitive landscape of …", "X vs Y vs Z", or asks for a competitor matrix. Uses search to discover competitors when the user only names a category, then scrape for each competitor's homepage, pricing page, and features/docs. Returns a normalized comparison matrix as JSON.
deep-research
✓★ 1,129by firecrawl
Multi-source research with source triangulation and fact-checking. Use for any research task requiring 3+ sources.
e-commerce
✓★ 1,129by firecrawl
Navigate e-commerce sites to extract products, pricing, categories, and inventory. Handles pagination, variants, and JS-heavy storefronts.
financial-research
✓★ 1,129by firecrawl
Pull company financials, SEC filings, and analyst consensus for a public company. Use this skill whenever the user says "10-K", "10-Q", "earnings", "revenue of", "financials for", "analyst rating for", "price target for", or provides a stock ticker. Combines SEC EDGAR for official filings with Yahoo Finance / TipRanks for analyst data. Search + scrape only; no interact needed.
pricing-tracker
✓★ 1,129by firecrawl
Extract and normalize pricing tiers from any SaaS, API, cloud, or LLM vendor's pricing page. Use this skill whenever the user says "pricing for X", "how much does X cost", "pricing tiers", "cost comparison", provides a URL ending in `/pricing` or `/plans`, or asks to monitor pricing over time. Pairs well with `exportSkill` to turn a run into a cron-friendly workflow. Scrape-driven; no interact needed for typical pricing pages.
structured-extraction
✓★ 1,129by firecrawl
Extract structured data matching a JSON schema from websites. Handles complex nested schemas, arrays, pagination, and validation. Always outputs via formatOutput.
tsdown
★ 950by sanity-io
Bundle TypeScript and JavaScript libraries with blazing-fast speed powered by Rolldown. Use when building libraries, generating type declarations, bundling for multiple formats, or migrating from tsup.
install-atk
✓★ 926by microsoft
Install or update the M365 Agents Toolkit (ATK) CLI and VS Code extension. Triggers: "install atk", "update atk", "install agents toolkit", "update agents toolkit", "install the toolkit", "setup atk", "get atk", "install atk cli", "install atk extension", "install atk vsix", "update the vs code extension", "install latest atk", "upgrade atk"
kotlin-tooling-immutable-collections-0-5-x-migration
★ 909by kotlin
Migrate Kotlin (and Java) code from kotlinx.collections.immutable 0.3.x / 0.4.x to the latest 0.5.x. The 0.5.x line renames every copy-returning method on PersistentList / PersistentMap / PersistentSet / PersistentCollection to a participial form per KEEP-0459 (add→adding, removeAt→removingAt, set→replacingAt, put→putting, clear→cleared, …) and deprecates the old names (WARNING, with ReplaceWith). Driven by the compiler: bump the version, recompile, and apply the rename each deprecation warning names. Use when the user mentions kotlinx.collections.immutable 0.5.x, PersistentList migration, "Use adding() instead", KEEP-0459, or sees deprecation warnings from kotlinx.collections.immutable.
kotlin-backend-jpa-entity-mapping
★ 909by kotlin
Model Kotlin persistence code correctly for Spring Data JPA and Hibernate. Covers entity design, identity and equality, uniqueness constraints, relationships, fetch plans, and common ORM (Object-Relational Mapping) traps specific to Kotlin. Use when creating or reviewing JPA (Java Persistence API) entities, diagnosing N+1 or LazyInitializationException, placing indexes and uniqueness rules, or preventing Kotlin-specific bugs such as data class entities and broken equals/hashCode.