Commit Graph

197 Commits

Author SHA1 Message Date
Bruno Borges
5e5cffd125 Regenerate README.skills.md with updated lsp-setup description
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-04-09 14:33:33 -04:00
Bruno Borges
34c9a9df20 Merge branch 'staged' into skill/lsp-setup 2026-04-09 12:23:31 -04:00
Imran Siddique
e95bd8c4ba feat: add 3 agent security skills (MCP audit, OWASP compliance, supply chain) (#1248)
* feat: add 3 agent security skills (MCP audit, OWASP compliance, supply chain)

- mcp-security-audit: Audit .mcp.json files for hardcoded secrets,
  shell injection, unpinned versions, dangerous command patterns
- agent-owasp-compliance: Check agent systems against OWASP ASI 2026
  Top 10 risks with compliance report generation
- agent-supply-chain: SHA-256 integrity manifests, tamper detection,
  version pinning audit, promotion gates for agent plugins

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* fix: address all 9 review comments

1. Added 3 new skills to docs/README.skills.md index
2. Added imports (json, re) to shell injection check snippet
3. Updated unpinned deps wording to match code behavior (@latest only)
4. Moved check_secrets() outside per-server loop to avoid duplicates
5. Added imports note to verify_manifest snippet
6. Updated promotion_check to support both .github/plugin and .claude-plugin layouts
7. Updated CI example to cd into plugin directory before verifying
8. Added check sections for all 10 ASI controls (was missing 03, 04, 06, 08, 10)
9. Made ASI-01 code snippet runnable with actual file scanning implementation

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* chore: regenerate docs/README.skills.md via npm start

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-04-09 15:33:08 +10:00
Saravanan Rajaraman
7f7b1b9b46 feat: Adds React 18 and 19 migration plugin (#1339)
- Adds React 18 and 19 migration orchestration plugins
- Introduces comprehensive upgrade toolkits for migrating legacy React 16/17 and 18 codebases to React 18.3.1 and 19, respectively. Each plugin bundles specialized agents and skills for exhaustive audit, dependency management, class/component API migration, test suite transformation, and batching regression fixes.
- The React 18 toolkit targets class-component-heavy apps, ensures safe lifecycle and context transitions, resolves dependency blockers, and fully automates test migrations including Enzyme removal. The React 19 toolkit addresses breaking changes such as removal of legacy APIs, defaultProps on function components, and forwardRef, while enforcing a gated, memory-resumable migration pipeline.
- Both plugins update documentation, plugin registries, and skill references to support reliable, repeatable enterprise-scale React migrations.
2026-04-09 15:18:52 +10:00
Aaron Powell
cd576764e7 Merge branch 'staged' into skill/lsp-setup 2026-04-09 13:00:46 +10:00
Temitayo Afolabi
6dd2453ef7 Enhance Salesforce Development plugin with new agents and skills (#1326)
* feat: add Salesforce Development plugin bundling Apex, Flow, LWC/Aura, and Visualforce agents

* feat: improve Salesforce plugin agents and add 3 quality skills

- Rewrote all 4 agent files with specific, actionable Salesforce guidance:
  - salesforce-apex-triggers: added discovery phase, pattern selection matrix,
    PNB test coverage standard, modern Apex idioms (safe nav, null coalescing,
    WITH USER_MODE, Assert.*), TAF awareness, anti-patterns table with risks,
    and structured output format
  - salesforce-aura-lwc: major expansion — PICKLES methodology, data access
    pattern selection table, SLDS 2 compliance, WCAG 2.1 AA accessibility
    requirements, component communication rules, Jest test requirements, and
    output format
  - salesforce-flow: major expansion — automation tool confirmation step, flow
    type selection matrix, bulk safety rules (no DML/Get Records in loops),
    fault connector requirements, Transform element guidance, deployment
    safety steps, and output format
  - salesforce-visualforce: major expansion — controller pattern selection,
    security requirements (CSRF, XSS, FLS/CRUD, SOQL injection), view state
    management, performance rules, and output format

- Added 3 new skills to the plugin:
  - salesforce-apex-quality: Apex guardrails, governor limit patterns, sharing
    model, CRUD/FLS enforcement, injection prevention, PNB testing checklist,
    trigger architecture rules, and code examples
  - salesforce-flow-design: flow type selection, bulk safety patterns with
    correct and incorrect examples, fault path requirements, automation density
    checks, screen flow UX guidelines, and deployment safety steps
  - salesforce-component-standards: LWC data access patterns, SLDS 2 styling,
    accessibility (WCAG 2.1 AA), component communication, Jest requirements,
    Aura event design, and Visualforce XSS/CSRF/FLS/view-state standards

- Updated plugin.json v1.0.0 → v1.1.0 with explicit agent paths and skill refs

* fix: resolve codespell error and README drift in Salesforce plugin

- Fix 'ntegrate' codespell false positive in salesforce-aura-lwc agent:
  rewrote PICKLES acronym bullets from letter-prefixed (**I**ntegrate)
  to full words (**Integrate**) so codespell reads the full word correctly
- Regenerate docs/README.plugins.md to match current build output
  (table column padding was updated by the build script)

* fix: regenerate README after rebasing on latest staged
2026-04-09 12:09:42 +10:00
Catherine Han
82c6b786ea feat: add FlowStudio monitoring + governance skills, update debug + build + mcp (#1304)
- **New skill: flowstudio-power-automate-monitoring** — flow health, failure
  rates, maker inventory, Power Apps, environment/connection counts via
  FlowStudio MCP cached store tools.
- **New skill: flowstudio-power-automate-governance** — 10 CoE-aligned
  governance workflows: compliance review, orphan detection, archive scoring,
  connector audit, notification management, classification/tagging, maker
  offboarding, security review, environment governance, governance dashboard.
- **Updated flowstudio-power-automate-debug** — purely live API tools (no
  store dependencies), mandatory action output inspection step, resubmit
  clarified as working for ALL trigger types.
- **Updated flowstudio-power-automate-build** — Step 1 uses list_live_flows
  (not list_store_flows) for the duplicate check, resubmit-first testing.
- **Updated flowstudio-power-automate-mcp** — store tool catalog, response
  shapes verified against real API calls, set_store_flow_state shape fix.
- Plugin version bumped to 2.0.0, all 5 skills listed in plugin.json.
- Generated docs regenerated via npm start.

All response shapes verified against real FlowStudio MCP API calls.
All 10 governance workflows validated with real tenant data.

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-09 10:39:58 +10:00
Patel Dhruv
49fd3f3faf Add new skill: Python PyPI Package Builder (#1302)
* Add python-pypi-package-builder skill for Python packaging

- Created `SKILL.md` defining decision-driven workflow for building, testing, versioning, and publishing Python packages.
- Added reference modules covering PyPA packaging, architecture patterns, CI/CD, testing, versioning strategy, and release governance.
- Implemented scaffold script to generate complete project structure with pyproject.toml, CI workflows, tests, and configuration.
- Included support for multiple build backends (setuptools_scm, hatchling, flit, poetry) with clear decision rules.
- Added secure release practices including tag-based versioning, branch protection, and OIDC Trusted Publishing.

* fix: correct spelling issues detected by codespell
2026-04-09 10:36:17 +10:00
jennyf19
112678359f Add Ember plugin metadata for marketplace registration (#1327)
Adds plugins/ember/ with plugin.json and README.md so Ember
appears as an installable plugin in the awesome-copilot
marketplace. The agent and skill files already exist at the
repo root from PR #1324.

Ran npm run plugin:validate (passes) and npm start to
regenerate README and marketplace.json.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-04-09 09:57:45 +10:00
Bruno Borges
d32b431aad Merge branch 'staged' into skill/lsp-setup 2026-04-08 17:30:31 -04:00
Jenny Ferries
64e5a4b765 Address PR review comments: add model field, fix SKILL.md description, add skills index entry
- Add model: claude-opus-4.6 to ember.agent.md frontmatter
- Collapse multi-line SKILL.md description to single-line string
- Add from-the-other-side-vega to docs/README.skills.md index

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-04-07 13:43:44 -07:00
Bruno Borges
9c7639427c Address review: clarify config filenames and snippet format
- Update SKILL.md description to mention both config paths (user-level
  and repo-level) instead of only lsp-config.json
- Clarify workflow step 6 with explicit file paths
- Add note in references/lsp-servers.md explaining snippets are objects
  to insert under the lspServers key
- Regenerate docs/README.skills.md with updated description

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-04-02 15:35:07 -04:00
Bruno Borges
c6590f51ca Add lsp-setup skill for configuring LSP servers in Copilot CLI
Adds a new skill that helps users install and configure Language Server
Protocol servers for GitHub Copilot CLI. Includes:

- Interactive workflow: detect OS, install server, write config, verify
- Bundled reference with 14 languages (Java/jdtls, TypeScript, Python,
  Go, Rust, C/C++, C#, Ruby, PHP, Kotlin, Swift, Lua, YAML, Bash)
- Per-OS install commands and ready-to-use lsp-config.json snippets
- Support for both user-level and repo-level configuration

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-04-02 15:20:11 -04:00
Jim Bennett
d79183139a Add Arize and Phoenix LLM observability skills (#1204)
* Add 9 Arize LLM observability skills

Add skills for Arize AI platform covering trace export, instrumentation,
datasets, experiments, evaluators, AI provider integrations, annotations,
prompt optimization, and deep linking to the Arize UI.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* Add 3 Phoenix AI observability skills

Add skills for Phoenix (Arize open-source) covering CLI debugging,
LLM evaluation workflows, and OpenInference tracing/instrumentation.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* Ignoring intentional bad spelling

* Fix CI: remove .DS_Store from generated skills README and add codespell ignore

Remove .DS_Store artifact from winmd-api-search asset listing in generated
README.skills.md so it matches the CI Linux build output. Add queston to
codespell ignore list (intentional misspelling example in arize-dataset skill).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* Add arize-ax and phoenix plugins

Bundle the 9 Arize skills into an arize-ax plugin and the 3 Phoenix
skills into a phoenix plugin for easier installation as single packages.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* Fix skill folder structures to match source repos

Move arize supporting files from references/ to root level and rename
phoenix references/ to rules/ to exactly match the original source
repository folder structures.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* Fixing file locations

* Fixing readme

---------

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-02 09:58:55 +11:00
mohammadali2549
8c417aa139 Add ContextMatic Plugin (#1166)
* initial commit

* review changes

* Update skills/integrate-context-matic/SKILL.md

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* mcp server renamed in onboarding skill

* Update SKILL.md

* Update README.md

* Apply suggestion from @Copilot

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* fix: improve skill.md

* concise description

* Apply suggestion from @Copilot

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* review changes

* update readme for plugin directory

* Update plugins/context-matic/.github/plugin/plugin.json

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update plugins/context-matic/README.md

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update skills/onboard-context-matic/SKILL.md

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update skills/onboard-context-matic/SKILL.md

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* review changes

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Muhammad Sohail <62895181+sohail2721@users.noreply.github.com>
2026-04-02 09:51:37 +11:00
Andrew Stellman
74208f679b quality-playbook v1.2.0: state machine analysis and missing safeguard detection (#1238)
Add Step 5a (state machine completeness analysis) and expand Step 6
with missing safeguard detection patterns. These catch two categories
of bugs that defensive pattern analysis alone misses: unhandled states
in lifecycle/status machines, and operations that commit users to
expensive work without adequate preview or termination conditions.
2026-04-01 10:37:00 +11:00
Mikael
7454bbdb7c feat: add GDPR-compliant engineering practices skill documentation (#1230)
* feat: add GDPR-compliant engineering practices skill documentation

* Add GDPR compliance references for Security and Data Rights

- Introduced a comprehensive Security.md file detailing encryption, password hashing, secrets management, anonymization, cloud practices, CI/CD controls, and incident response protocols.
- Created a Data Rights.md file outlining user rights implementation, Record of Processing Activities (RoPA), consent management, sub-processor management, and DPIA triggers.

* Refine GDPR compliance documentation by removing unnecessary symbols and ensuring clarity in security and data rights references

* refactor: streamline description formatting in GDPR compliance skill documentation

---------

Co-authored-by: Aaron Powell <me@aaron-powell.com>
2026-03-31 10:53:25 +11:00
Mrigank Singh
7e375eac04 feat: add security-review skill for AI-powered codebase vulnerability scanning (#1211)
* feat: add security-review skill for AI-powered codebase vulnerability scanning

* chore: regenerate README tables

* fix: address Copilot review comments on reference files
2026-03-30 11:44:48 +11:00
Yiou Li
df0ed6aa51 update eval-driven-dev skill. (#1201)
* update eval-driven-dev skill.

Split SKILL into multi-level to keep the skill body under 500 lines, rewrite instructions.

* Apply suggestions from code review

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2026-03-30 08:07:39 +11:00
Vijay Chegu
afba5b86b8 Add threat-model-analyst skill: STRIDE-A threat modeling for repositories (#1177)
* Add threat-model-analyst skill: STRIDE-A threat modeling for repositories

Add a comprehensive threat model analysis skill that performs security audits
using STRIDE-A (STRIDE + Abuse) threat modeling, Zero Trust principles, and
defense-in-depth analysis.

Supports two modes:
- Single analysis: full STRIDE-A threat model producing architecture overviews,
  DFD diagrams, prioritized findings, and executive assessments
- Incremental analysis: security posture diff between baseline report and current
  code, producing standalone reports with embedded comparison

Includes bundled reference assets:
- Orchestrator workflows (full and incremental)
- Analysis principles and verification checklists
- Output format specifications and skeleton templates
- DFD diagram conventions and TMT element taxonomy

* Address PR review comments from Copilot reviewer

- Fix SKILL.md description: use single-quoted scalar, rename mode (2) to
  'Incremental analysis' with accurate description
- Replace 'Compare Mode (Deprecated)' sections with 'Comparing Commits or
  Reports' redirect (no deprecated language for first release)
- Fix skeleton-findings.md: move Tier 1 table rows under header, add
  CONDITIONAL-EMPTY block after END-REPEAT (matching Tier 2/3 structure)
- Fix skeleton-threatmodel.md and skeleton-architecture.md: use 4-backtick
  outer fences to avoid nested fence conflicts with inner mermaid fences
- Fix skeleton-incremental-html.md: correct section count from 9 to 8
- Fix output-formats.md: change status 'open' to 'Open' in JSON example,
  move stride_category warning outside JSON fence as blockquote
- Fix incremental-orchestrator.md: replace stale compare-output-formats.md
  reference with inline color conventions
- Regenerate docs/README.skills.md with updated description

* Address second round of Copilot review comments

- Fix diagram-conventions.md: bidirectional flow notation now uses <-->
  matching orchestrator.md and DFD templates
- Fix tmt-element-taxonomy.md: normalize SE.DF.SSH/LDAP/LDAPS to use
  SE.DF.TMCore.* prefix consistent with all other data flow IDs
- Fix output-formats.md: correct TMT category example from SQLDatabase
  to SQL matching taxonomy, fix component type from 'datastore' to
  'data_store' matching canonical enum, remove DaprSidecar from
  inbound_from per no-standalone-sidecar rule
- Fix 5 skeleton files: clarify VERBATIM instruction to 'copy the
  template content below (excluding the outer code fence)' to prevent
  agents from wrapping output in markdown fences
- Genericize product-specific names in examples: replace edgerag with
  myapp, BitNetManager with TaskProcessor, AzureLocalMCP with MyApp.Core,
  AzureLocalInfra with OnPremInfra, MilvusVectorDB with VectorDB

* Address third round of Copilot review comments

- Fix diagram-conventions.md: second bidirectional two-arrow pattern in
  Quick Reference section now uses <-->
- Fix incremental-orchestrator.md: renumber HTML sections 5-9 to 4-8
  matching skeleton-incremental-html.md 8-section structure
- Fix output-formats.md: add incremental-comparison.html to File List
  as conditional output for incremental mode
- Fix skeleton-inventory.md: add tmt_type, sidecars, and boundary_kind
  fields to match output-formats.md JSON schema example
2026-03-30 07:58:56 +11:00
Andrew Stellman
d0fdc3a566 quality-playbook v1.1.0: regression test generation (#1190)
* quality-playbook v1.1.0: add regression test generation and startup banner

* Regenerate docs/README.skills.md for quality-playbook v1.1.0
2026-03-27 15:51:32 +11:00
Onur Senturk
34bb8f02b9 Add daily-prep skill: structured meeting prep with calendar analysis and productivity scoring (#1181)
* Add daily-prep skill: structured meeting prep with calendar analysis and productivity scoring

* fix: use single-quoted YAML scalar for description frontmatter
2026-03-27 11:17:04 +11:00
Satya K
3b2c4fb913 Add Draw.io Diagram Generator skill and instructions (#1179)
* Add draw-io diagram generator skill for awesome github copilot

* Add comprehensive shape libraries and style reference documentation for draw.io

- Introduced a new markdown file for draw.io shape libraries detailing various built-in shapes, their style keys, and usage.
- Added a complete style reference for `<mxCell>` elements, including universal style keys, shape-specific keys, edge styles, and color palettes.
- Included examples for common styles and shapes to aid users in creating diagrams effectively.

* Add draw-io diagram validation and shape addition scripts

* Add new diagram templates for flowchart, sequence, and UML class diagrams

- Created a flowchart template with a structured layout including start, steps, decision points, and end.
- Added a sequence diagram template illustrating interactions between a client, API server, and database with activation boxes and message arrows.
- Introduced a UML class diagram template featuring an interface, classes, attributes, methods, and relationships, including composition and realization.

* Add draw-io diagram generator skill to README with detailed usage instructions and bundled assets

* Add draw.io instructions with workflow, XML structure rules, style conventions, and validation checklist

* Add draw.io diagram standards to README instructions for enhanced diagram creation and editing

* Moving diagram templates to assets/ to follow agentskills structure

- Moved flowchart template with start, steps, decision points, and end nodes.
- Moved sequence diagram template illustrating interactions between a client, API server, and database.
- Moved UML class diagram template featuring an interface, classes, attributes, methods, and relationships.

* Clarify installation instructions for draw.io VS Code extension in SKILL.md
2026-03-27 11:15:53 +11:00
Marcello Cuoghi
642ae3ef9b feat: add ruff-recursive-fix skill for iterative code quality enforcement (#1183)
Co-authored-by: Cuoghi, Marcello <Marcello.Cuoghi@systemlogistics.com>
2026-03-27 11:13:50 +11:00
Onur Senturk
c49c7a1824 Add email-drafter skill: personalized email drafting with tone analysis via WorkIQ (#1182)
* Add email-drafter skill: personalized email drafting with tone analysis via WorkIQ

* fix: use single-quoted YAML scalar for description frontmatter
2026-03-27 10:24:47 +11:00
Andrew Stellman
50f87bdc13 Add quality-playbook skill (#1168) 2026-03-26 10:09:58 +11:00
Dan Velton
994e443df1 Add roundup plugin: self-configuring status briefing generator (#1157)
* Add roundup plugin: self-configuring status briefing generator

Adds a new plugin with two skills:

- roundup-setup: Interactive onboarding that learns the user's communication
  style from examples, discovers available data sources, and builds audience
  profiles. Writes a persistent config to ~/.config/roundup/config.md.

- roundup: Generates draft status briefings on demand by pulling from
  configured sources (GitHub, M365, Slack, Google Workspace, etc.) and
  synthesizing in the user's learned style for any defined audience.

Platform-agnostic by design -- adapts to whatever MCP tools are available
in the user's environment rather than assuming specific integrations.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Address PR review comments

- Fix 'use roundup' help text to clarify multi-audience behavior instead
  of referencing a nonexistent 'default audience'
- Split bundled 'who do you report to + who is on your team' into two
  separate ask_user questions per the one-question-at-a-time rule
- Specify ~/Desktop as explicit save path with fallback prompt when
  directory doesn't exist
- Tables in README verified as correct markdown (single | delimiters)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Improve example-pasting UX in setup flow

- Make 'paste the whole thing right here' explicit so users aren't
  unsure about what/how much to paste
- Confirm receipt more clearly ('grabbed all of that')
- Reframe second example prompt to explain why a second helps
- Cap follow-up asks at two so it doesn't feel nagging
- Note that messy formatting is fine

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Reinforce that more examples = better output

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-03-26 09:55:31 +11:00
Jeonghoon Lee
3e01810473 Add azure-architecture-autopilot skill 🤖🤖🤖 (#1158)
* Add azure-architecture-autopilot skill

E2E Azure infrastructure automation skill:
- Natural language → Architecture diagram → Bicep → Deploy
- 70+ service types with 605+ official Azure icons
- Interactive HTML diagrams (drag, zoom, click, PNG export)
- Scans existing resources or designs new architecture
- Modular Bicep with RBAC, Private Endpoints, DNS
- Multi-language support (auto-detects user language)
- Zero dependencies (diagram engine embedded)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Fix generator.py import for flat scripts/ structure + sync README

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

---------

Co-authored-by: whoniiii <whoniiii@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-03-25 10:20:38 +11:00
Chad Bentz
7e326fe334 Extend secret-scanning skill with MCP pre-commit scanning support (#1156)
* fix: scope secret-scanning changes for staged PR (#3)

* Update skills/secret-scanning/SKILL.md

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update skills/secret-scanning/SKILL.md

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2026-03-25 09:50:07 +11:00
Punit
9856b62b88 Add geofeed-tuner skill for RFC 8805 IP geolocation feeds (#1138)
* Add geofeed-tuner skill for RFC 8805 IP geolocation feeds

* Fix Codespell errors and apply  awesome-copilot contrib guidelines

* Fix Codespell errors and apply  awesome-copilot contrib guidelines

* Fix Codespell errors and apply  awesome-copilot contrib guidelines

* Update geofeed-tuner skill description and assets
2026-03-24 16:25:10 +11:00
Pasindu Premarathna
b3de20181a feat: add .NET timezone handling guidance and reference materials (#1123)
* feat: add .NET timezone handling guidance and reference materials

* feat: update Finland, Lithuania, Estonia timezone reference in index

* feat: remove Finland, Lithuania, Estonia timezone reference from index
2026-03-23 11:30:33 +11:00
Yiou Li
371d0dd072 Update eval-driven-dev skill (#1092)
* Update eval-driven-dev skill.

* Update skills/eval-driven-dev/SKILL.md

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update skills/eval-driven-dev/SKILL.md

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update skills/eval-driven-dev/resources/check_version.py

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update skills/eval-driven-dev/resources/check_version.py

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update skills/eval-driven-dev/resources/version.json

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Remove skill version check, only upgrade python package.

* run npm start to update readme

* Rename "eval-driven-dev" to "qa-eval" to better reflect the functionality of the skill.

* run npm start

* revert the skill name change, run npm start.

---------

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2026-03-23 10:38:54 +11:00
Kartik Dhiman
e4fc57f204 feat: add spring-boot-testing skill for Spring Boot 4.0 (#1085)
- Introduced MockMvcTester for AssertJ-style assertions in Spring MVC testing.
- Added @RestClientTest for testing REST clients with MockRestServiceServer.
- Implemented RestTestClient as a modern alternative to TestRestTemplate.
- Documented migration steps from Spring Boot 3.x to 4.0, including dependency and annotation changes.
- Created an overview of test slices to guide testing strategies.
- Included Testcontainers setup for JDBC testing with PostgreSQL and MySQL.
- Enhanced @WebMvcTest documentation with examples for various HTTP methods and validation.
2026-03-20 10:24:37 +11:00
Smit Patel
3f1cafafe9 feat: add 11 GTM skills for technical product founders and operators (#1066)
* feat: add 11 GTM skills for technical product founders and operators

* fix: remove duplicate pr package folder

---------

Co-authored-by: Smit Patel <smitpatel@Smits-Laptop.local>
2026-03-20 10:09:57 +11:00
Sanjay Ramassery Babu
a31b09b60f AWS CDK Python Setup (#1071)
Co-authored-by: Aaron Powell <me@aaron-powell.com>
2026-03-19 11:02:10 +11:00
Luis Cantero
05f4d6757e Add skill autoresearch (#1062)
* Add skill autoresearch

* Update readme

* Potential fix for pull request finding

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

* Address bot feedback

---------

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
2026-03-19 10:29:01 +11:00
Ve Sharma
f601edcc87 GHAS Pack - Agent Skills for GitHub Advanced Security - Includes Dependabot, CodeQL, and Secret Scanning (#1049)
* feat: add dependabot skill

* feat: add codeql skill

* feat: add secret-scanning skill

* feat: run start and update docs

* fix: replace deprecated @dependabot merge example with native auto-merge guidance

The usage example still showed @dependabot merge despite the Jan 2026
deprecation. Replaced with gh pr merge --auto and GitHub UI auto-merge.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-03-18 11:15:29 +11:00
Utkarsh patrikar
5418673f24 Premium frontend skill (#1047)
* feat: Add premium-frontend-ui Awwwards-quality aesthetic skill

* docs: update README.skills.md with premium-frontend-ui skill
2026-03-18 11:12:21 +11:00
Andrea Liliana Griffiths
4ad31b665f Add publish-to-pages agent skill (#1035)
* Add publish-to-pages agent skill

Agent skill that publishes presentations and web content to GitHub Pages.
Works with any AI coding agent (Copilot CLI, Claude Code, Gemini CLI, etc.)

Features:
- Converts PPTX and PDF with full formatting preservation
- Creates repo, enables Pages, returns live URL
- Zero config — just needs gh CLI

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* docs: update README.skills.md

---------

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-03-17 12:49:40 +11:00
suyask-msft
8bfc9f3c4b Source dataverse plugin externally from microsoft/Dataverse-skills (#1010)
* Source dataverse plugin from microsoft/Dataverse-skills

The Dataverse plugin was previously bundled locally with a single
mcp-configure skill. It is now sourced externally from
microsoft/Dataverse-skills, which provides the full skill set:
init, setup, metadata, python-sdk, solution, mcp-configure, and overview.

- marketplace.json: update dataverse entry to external source format
- external.json: add Dataverse entry alongside Azure
- plugins/dataverse/: remove local plugin directory (now external)
- skills/mcp-configure/: remove top-level copy (now in external plugin)
- docs/README.plugins.md: update dataverse row with external link
- docs/README.skills.md: note mcp-configure moved to external plugin

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* Make dataverse plugin docs generic to avoid stale counts

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* Remove mcp-configure from skills index — now in external plugin

External plugins don't list their skills in README.skills.md
(consistent with azure-skills).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* Revert manual edits to generated files

marketplace.json, README.plugins.md, and README.skills.md are
auto-generated. External plugins are discovered via external.json
and merged into marketplace.json by generate-marketplace.mjs.
Matches the Azure external plugin pattern — no manual doc entries.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* Regenerate marketplace.json and docs after external plugin change

Run npm run build to pick up the new external dataverse entry and
remove the old local one from generated files.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-17 08:32:26 +11:00
Yiou Li
47f544a09c Add eval-driven development skill (#1013)
* Add eval-driven development skill

* Potential fix for pull request finding

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
2026-03-16 10:48:08 +11:00
Yauhen
3751155165 Add unit-test-vue-pinia skill (#1005) 2026-03-16 10:39:36 +11:00
Tadas Labudis
20afb96f66 Merge pull request #1004 from github/labudis/issue-fields-description
Update issue-fields-migration skill description
2026-03-15 23:37:42 +00:00
Aaron Powell
9272be1a8d Duplicate review (#1001)
* Removing a codex-specific agent (model deprecated) and removing model from blueprint mode

* Combining skills into a single skill with an internal decision tree

* Converting agents to skill with decision tree

Closes #998

* Converting agents to skill with decision tree"
Fixes #999
2026-03-16 10:27:54 +11:00
Christopher Harrison
4aef998cc7 feat: add sandbox-npm-install skill to community collection (#989)
Add a reusable Agent Skill that installs npm packages in Docker sandbox
environments where virtiofs-mounted workspaces cause native binary crashes
(esbuild, lightningcss, rollup). The script installs on local ext4 and
symlinks node_modules back into the workspace.

- SKILL.md with spec-compliant frontmatter and documentation
- scripts/install.sh with security hardening (no eval, readonly paths)
- Updated docs/README.skills.md with new skill entry

Co-authored-by: GeekTrainer <GeekTrainer@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-03-16 10:27:32 +11:00
Tadas Labudis
f7a0d97433 Update issue-fields-migration description with trigger prompts and feature context
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-03-13 07:30:32 +00:00
Aaron Powell
b1f3346ef2 content review (#995)
* Cleaned up some tool names

* Removing some instructionsThese instructions are no longer useful as the knowledge the add is already well handled by frontier models, so the instructions potentially provide conflicting or incorrect information to the agent while it undertakes a task

* Improved the skill to be more explicit on how to use playwright

* Removing a skill that is of low value

The information captured in this skill is mostly just what is found in the links that are at the top of the references, and thus the model will already have that knowledge available to it, meaning that the skill will potentially provide conflicting guidance to the agent as it works

* Updating readmes
2026-03-13 13:45:17 +11:00
Tadas Labudis
af09f9c38e New skill: issue-fields-migration (#990)
* Add issue-fields-migration skill

Standalone skill to bulk-copy field values from Project V2 fields to
org-level issue fields. Includes 5-phase workflow (discovery, option
mapping, data scan, preview/dry-run, execution) with API references
for issue fields REST API and Projects V2 API.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Expand issue-fields-migration skill to support label migration

Add support for migrating repo-based labels to org-level issue fields,
in addition to the existing project field migration flow.

Changes:
- Add Step 0 routing: ask user if migrating labels or project fields
- Add Label Migration Flow (Phases L1-L5) with conflict detection,
  bulk mapping, and optional label removal
- Add labels API to Available Tools table
- Create references/labels-api.md
- Add 3 label migration examples (single, bulk, cross-repo)
- Expand Important Notes with label-specific guidance
- Rename existing phases to P1-P6 under Project Field Migration Flow
- Include P1 fixes from prior work (proxy field filtering, batch
  option mapping, preflight permission checks, pagination fixes)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* fix: payload format, field_id type + 10 UX/scale improvements

Bug fixes:
- Wrap write endpoint payload in {"issue_field_values": [...]} (was bare array)
- Use integer field_id, not string (both Phase L5 and P6)

UX improvements:
- Label filtering guidance for repos with 50+ labels
- Smarter auto-suggest with 4 pattern tiers (exact, prefix-number, strip-separators, substring)
- Handle zero-issue labels gracefully (stop and suggest alternatives)
- Add time estimates to migration previews
- Document read response shape (.single_select_option.name vs .value)

Scale & reliability:
- Script generation guidance for 100+ issue migrations
- Idempotent/resumable migration note
- Warn about --limit 1000 silent truncation
- Warn about macOS bash 3.x (no declare -A)
- PR filtering guidance (type field)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Update README.skills.md with build

Regenerated skills index to reflect label migration support and
updated references for issue-fields-migration skill.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Address PR review comments: fix MCP conventions, step numbering, pagination, phase refs

- Align MCP tool calls with repo conventions (method: instead of action:,
  owner: instead of project_owner:) in SKILL.md and projects-api.md
- Fix step numbering in Phase P2 (duplicate step 5 → renumber to 6)
- Update example phase references to use P1-P6/P1-P5 labels
- Add pageInfo pagination to GraphQL fields and fieldValues queries
- Fix MCP tool name in labels-api.md to mcp__github__list_issues

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-03-13 09:42:14 +11:00
Pham Tien Thuan Phat
c568598b38 chore: update ScoutQA skill with issue verification and localhost testing support (#983)
* chore: update ScoutQA skill with issue verification and localhost testing support

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix: address PR feedback - single-line description and remove create-execution from header

---------

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-13 09:36:08 +11:00
Dan Velton
eb7d223446 Add doublecheck plugin: three-layer verification pipeline for AI output (#978)
* Add doublecheck plugin: three-layer verification pipeline for AI output

Adds a new plugin that helps users verify AI-generated content before
acting on it. Designed for sensitive contexts (legal, medical, financial,
compliance) where hallucinations carry real consequences.

Three verification layers:
- Self-Audit: extracts verifiable claims, checks internal consistency
- Source Verification: web searches per claim, produces URLs for human review
- Adversarial Review: assumes errors exist, checks hallucination patterns

Supports persistent mode (auto-verifies every factual response inline)
and one-shot mode (full report on specific text). Confidence ratings:
VERIFIED, PLAUSIBLE, UNVERIFIED, DISPUTED, FABRICATION RISK.

Includes:
- Skill (skills/doublecheck/) with bundled report template
- Agent (agents/doublecheck.agent.md) for interactive verification
- Plugin package (plugins/doublecheck/) bundling both

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Address review: fix tools YAML format, remove materialized artifacts

- Fix tools frontmatter in agents/doublecheck.agent.md to use standard
  YAML list format instead of flow sequence with trailing comma
- Remove plugins/doublecheck/agents/ and plugins/doublecheck/skills/
  from tracking; these paths are in .gitignore as CI-materialized
  artifacts that should not be committed

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-03-12 12:35:43 +11:00