Extend GitHub Copilot
VS Code Agent Skill
Build a SKILL.md file with YAML frontmatter, structured instructions, and few-shot examples to teach Copilot new capabilities.
For anyone teaching Copilot a new skill — any domain, any framework, any workflow. If you can describe it, you can skill it.
Start with the archetype’s base structure.
Begin with an empty canvas for this archetype.
54 templates available
Pick a ready-made setup below to move faster.
Templates
54 totalCode Reviewer
Reviews pull requests for bugs, performance issues, and style inconsistencies.
Test Engineer
Generates comprehensive test suites with edge cases and mocks.
DevOps Engineer
Writes CI/CD pipelines, Dockerfiles, and infrastructure configurations.
Security Auditor
Scans code for OWASP Top 10 vulnerabilities and security anti-patterns.
Secret Scanner
Detects hardcoded secrets, API keys, tokens, and credentials leaked in source code.
Incident Response Agent
Guides teams through security incident response, triage, containment, and post-mortem procedures.
Compliance Checker
Reviews code and infrastructure for GDPR, SOC 2, and HIPAA compliance patterns.
Container Security Scanner
Audits Dockerfiles, container images, and Kubernetes manifests for security misconfigurations and hardening gaps.
API Security Tester
Tests APIs against the OWASP API Security Top 10, checking authentication, authorization, rate limiting, and data exposure.
Supply Chain Security
Secures the software supply chain: SBOM generation, dependency provenance, artifact signing, and build integrity.
Cloud Security Auditor
Audits AWS, Azure, and GCP configurations for security misconfigurations, overly permissive IAM policies, and public exposure.
Frontend Architect
Builds accessible, performant component architectures in React, Vue, or Svelte with design-system discipline.
Backend Architect
Designs scalable service architectures, data models, and API contracts with production-grade error handling.
Performance Optimizer
Diagnoses and fixes performance bottlenecks in web apps — Core Web Vitals, bundle size, runtime efficiency.
Migration Specialist
Plans and executes framework upgrades, language migrations, and deprecation removals with zero-downtime strategies.
Kubernetes Operator
Writes production-grade K8s manifests, Helm charts, and cluster management configurations.
Observability Engineer
Designs monitoring dashboards, alerting rules, SLOs, and distributed tracing instrumentation.
ADR Writer
Creates Architecture Decision Records that capture context, options, and consequences of technical decisions.
Onboarding Guide Writer
Creates developer onboarding documentation that gets new team members productive in days, not weeks.
Threat Modeler
Conducts STRIDE-based threat modeling, creates attack trees, and produces actionable risk assessments.
Data Pipeline Engineer
Designs ETL/ELT pipelines, streaming architectures, and data quality frameworks.
Accessibility Auditor
Audits web interfaces for WCAG 2.2 compliance, keyboard navigation, and screen reader compatibility.
Design System Maintainer
Maintains component libraries, design tokens, and pattern documentation for consistent UIs.
Prompt Engineer
Optimizes system prompts, crafts few-shot examples, and designs evaluation frameworks for LLM applications.
ML Pipeline Builder
Designs end-to-end ML pipelines: data preparation, training, evaluation, and deployment with experiment tracking.
Email Drafter
Composes context-aware professional emails — follow-ups, cold outreach, status updates, and escalations.
Meeting Notes Agent
Transforms meeting transcripts and raw notes into structured summaries with decisions, action items, and owners.
Ticket Writer
Creates well-structured Jira, Linear, or GitHub issues from vague descriptions with acceptance criteria and sizing.
Slack Message Composer
Crafts clear team messages — announcements, updates, requests, and incident comms for Slack and Teams.
Content Repurposer
Converts content between formats — blog posts to social threads, docs to tutorials, notes to presentations.
Supabase Developer
Teaches AI to build with Supabase — database schemas, Row Level Security, Auth, Edge Functions, and Realtime.
Stripe Integration
Teaches AI to implement Stripe payments — checkout sessions, webhooks, subscriptions, and billing portal.
Vercel Platform
Teaches AI to deploy and configure on Vercel — serverless functions, edge middleware, environment variables, and caching.
Clerk Auth
Teaches AI to implement authentication with Clerk — sign-in/up flows, middleware protection, organizations, and webhooks.
Resend Email
Teaches AI to send transactional emails with Resend — React Email templates, domains, and delivery tracking.
Prisma ORM
Teaches AI to model data with Prisma — schemas, migrations, typed queries, relations, and performance patterns.
Neon Serverless Postgres
Teaches AI to use Neon — serverless Postgres with branching, autoscaling, connection pooling, and the serverless driver.
Upstash Redis & Messaging
Teaches AI to use Upstash — serverless Redis for caching, rate limiting, and QStash for message queues and scheduled jobs.
Git Workflow Agent
Manages branching strategies, commit conventions, and merge workflows.
Secure Code Reviewer
Reviews code with a security-first lens, enforcing secure defaults and defensive coding patterns.
Next.js Project
CLAUDE.md for a Next.js application with App Router, Tailwind CSS, and TypeScript conventions.
Python API Project
CLAUDE.md for a Python backend with FastAPI, SQLAlchemy, and pytest conventions.
Fullstack Monorepo
CLAUDE.md for a Turborepo monorepo with a Next.js frontend and shared packages.
Go Microservice
CLAUDE.md for a Go microservice with standard project layout, gRPC, and structured logging.
Rust CLI Tool
CLAUDE.md for a Rust command-line application with clap, structured errors, and release builds.
Next.js TypeScript
Cursor rules for Next.js projects with App Router, TypeScript strict mode, and Tailwind CSS.
Python FastAPI
Cursor rules for Python backends with FastAPI, Pydantic validation, and async patterns.
React Component Library
Cursor rules for building accessible, composable React component libraries with Storybook.
Go Backend Service
Cursor rules for Go microservices with clean architecture, structured logging, and gRPC/REST APIs.
Security-Hardened Rules
Cursor rules enforcing secure coding practices — input validation, auth, encryption, and OWASP compliance.
Next.js Full Stack
Windsurf rules for a Next.js App Router project with TypeScript, Tailwind CSS, and Prisma.
Python FastAPI
Windsurf rules for a Python backend built with FastAPI, SQLAlchemy, and Pydantic.
React SPA
Windsurf rules for a React single-page application with TypeScript, Vite, and React Router.
Go Microservice
Windsurf rules for a Go microservice with standard library HTTP, structured logging, and PostgreSQL.