Trusted skills for AI agents from official vendors and established maintainers. Every skill is attributed to its author, scanned, and comes with install steps for your AI tool.
178 skills
WordPressOfficial
A comprehensive guide for auditing WordPress plugins against the official WordPress.org Plugin Directory guidelines.
WordPressOfficial
A deterministic inspection tool for WordPress repositories that generates structured JSON reports on project structure, tooling, and versioning.
WordPressOfficial
Audit WordPress plugin REST controllers to generate a structured plan for Abilities API registration.
MicrosoftOfficial
Assesses GitHub issues for backlog health and provides advisory reports without modifying repository state.
MicrosoftOfficial
A systematic workflow to configure cspell for project-specific vocabulary and ignore patterns.
MicrosoftOfficial
Automated triage agent for GitHub issues in the hve-core repository.
MicrosoftOfficial
Standardized data contracts and reporting templates for security, accessibility, and RAI review orchestrators.
MicrosoftOfficial
A structured, evidence-based workflow for conducting comprehensive code reviews across multiple functional and technical perspectives.
MicrosoftOfficial
Automated review agent for dependency changes, focusing on licensing, maintenance, necessity, and security pinning.
MathWorksOfficial
Systematically review MATLAB code for quality, performance, and adherence to MathWorks coding standards.
MathWorksOfficial
Expert review guide for MATLAB fixed-point (fi) code to improve performance, code generation efficiency, and correctness.
SentryOfficial
Standardizes repository-level agent instructions using concise AGENTS.md and CLAUDE.md files.
SentryOfficial
A structured framework for conducting code reviews based on established engineering practices.
SentryOfficial
A structured audit process for identifying bugs, security vulnerabilities, and code quality issues in local branch changes.
SentryOfficial
An expert agent skill for refactoring code to improve clarity, consistency, and maintainability while strictly preserving existing functionality.
JetBrainsOfficial
Review Kotlin + Spring changes for behavioral regressions, transaction and proxy bugs, API and serialization mistakes, persistence risks, security issues, configuration drift, and missing tests. Use when reviewing a PR, diff, patch, or design change where generic style-focused review would miss Spring-specific correctness and operational risks.
JetBrainsOfficial
Refactor Kotlin code toward clearer, more idiomatic design without breaking Spring behavior, serialization, persistence, or public contracts. Use when Java-flavored Kotlin needs cleanup, domain modeling should become more expressive, or boilerplate should be reduced, but the refactoring must remain safe for proxies, Jackson, JPA, configuration binding, and existing tests.
JetBrainsOfficial
Use when semantic refactoring is needed in Rider-supported solutions and projects, including .NET/C#, F#, VB, C++, Unity, Unreal Engine, XAML, Razor, and other GameDev or mixed-language projects. Trigger when edits must update declarations and usages across IDE-resolved references — rename symbols, move types or namespaces, safe-delete unused code, extract interface/base class/method, change signatures, or reorganize namespaces. Do not use for file-only moves, config keys, strings, comments, prose-only edits, generated output, or logic changes with unchanged names/signatures.
JetBrainsOfficial
Design and audit Spring Security configurations for Kotlin plus Spring services, including filter chains, JWT or OAuth2 resource server setup, method security, CORS, CSRF rationale, and public endpoint exposure. Use when adding or reviewing authentication and authorization, narrowing access rules, validating token handling, or checking for insecure defaults and accidental exposure.
JetBrainsOfficial
Cross-validate CLI flags, docs, tests, and targets for consistency across the codebase. Use this skill whenever the user asks to: audit the codebase, check for consistency issues, find undocumented flags, verify test coverage, validate targets.yaml, check handler split conventions, or verify oplog instrumentation. This is a read-only audit — it reports issues but never modifies files. Use after large refactors, before releases, or whenever you suspect docs/code/tests have drifted out of sync.
Grafana LabsOfficial
A systematic workflow for auditing and reducing JavaScript dependency footprints in pnpm-based projects.
PostHogOfficial
Automated resolution of minor pull request review threads using a conservative, small-fix profile.
PostHogOfficial
Automated resolution of pull request review threads based on safety and intent criteria.
PostHogOfficial
A specialized code review perspective focused on security vulnerabilities, API contract integrity, and input validation.