Skills（SKILL.md）は、AIエージェント（Claude Code、Cursor、Codexなど）に特定の能力を追加するための設定ファイルです。
詳しく見る →'All changes to code must follow the guidance documented in the repository. Before any issue is filed, branch is made, commits generated, or pull request (or PR) created, a search must be done to ensure the right steps are followed. Whenever asked to create an issue, commit messages, to push code, or create a PR, use this skill so everything is done correctly.'
'Create, update, refactor, explain, or review Microsoft Agent Framework solutions using shared guidance plus language-specific references for .NET and Python.'
Explore any codebase from scratch and generate six quality artifacts: a quality constitution (QUALITY.md), spec-traced functional tests, a code review protocol with regression test generation, an integration testing protocol, a multi-model spec audit (Council of Three), and an AI bootstrap file (AGENTS.md). Includes state machine completeness analysis and missing safeguard detection. Works with any language (Python, Java, Scala, TypeScript, Go, Rust, etc.). Use this skill whenever the user asks to set up a quality playbook, generate functional tests from specifications, create a quality constitution, build testing protocols, audit code against specs, or establish a repeatable quality system for a project. Also trigger when the user mentions 'quality playbook', 'spec audit', 'Council of Three', 'fitness-to-purpose', 'coverage theater', or wants to go beyond basic test generation to build a full quality system grounded in their actual codebase.
Run Ruff checks with optional scope and rule overrides, apply safe and unsafe autofixes iteratively, review each change, and resolve remaining findings with targeted edits or user decisions.
An AI-powered security scanner that reasons about your codebase the way a human security
'Create, update, refactor, explain, or review Semantic Kernel solutions using shared guidance plus language-specific references for .NET and Python.'
Analyze Terraform plan JSON output for AzureRM Provider to distinguish between false-positive diffs (order-only changes in Set-type attributes) and actual resource changes. Use when reviewing terraform plan output for Azure resources like Application Gateway, Load Balancer, Firewall, Front Door, NSG, and other resources with Set-type attributes that cause spurious diffs due to internal ordering changes.
This skill enables visual inspection and validation of website design quality, identifying and fixing issues at the source code level.
'Guides the Copilot CLI on how to use the WorkIQ CLI/MCP server to query Microsoft 365 Copilot data (emails, meetings, docs, Teams, people) for live context, summaries, and recommendations.'
Collect real financial data for any US publicly traded company from free public sources (yfinance). Output structured JSON consumable by downstream financial skills (DCF modeling, comps analysis, earnings review). Handles market data (price, shares, beta), historical financials (income statement, cash flow, balance sheet), WACC inputs, and analyst estimates. Use when users request collect data for ticker, get financials for company, pull market data, gather DCF inputs, or any task requiring structured financial data before analysis. Also triggers on financial data, company data, stock data.
Reviews and improves Claude Code skills against official best practices. Supports three modes - self-review (validate your own skills), external review (evaluate others' skills), and auto-PR (fork, improve, submit). Use when checking skill quality, reviewing skill repositories, or contributing improvements to open-source skills.
meeting-minutes-taker
A disciplined approach to writing code that communicates intent, minimizes surprises, and welcomes change. Apply these principles when writing new code, reviewing pull requests, refactoring legacy sys
A systematic approach to web performance optimization grounded in how browsers, protocols, and networks actually work. Apply these principles when building frontend applications, reviewing performance
A systems-level approach to software craftsmanship from Hunt & Thomas' "The Pragmatic Programmer" (20th Anniversary Edition). Apply these principles when designing systems, reviewing architecture, wri
A disciplined approach to improving the internal structure of existing code without changing its observable behavior. Apply these named transformations when reviewing code, reducing technical debt, or
A practical framework for managing the fundamental challenge of software engineering: complexity. Apply these principles when designing modules, reviewing APIs, refactoring code, or advising on archit
A structured approach to designing large-scale distributed systems. Apply these principles when architecting new services, reviewing system designs, estimating capacity, or preparing for system design
>
>
>
>
Commits github changes to repository safely and professionally. use this before any commit made to github.
architect-review workflow skill. Use this skill when the user needs Master software architect specializing in modern architecture and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
Perform comprehensive AWS security posture assessments using AWS CLI. Audits IAM policies, reviews security group rules, checks S3 bucket permissions, evaluates CloudTrail logging, and identifies unencrypted resources. Use when asked for 'AWS security audit', 'cloud security review', 'IAM audit', 'AWS compliance check', or 'security group review'. Do NOT use for general security code review or non-AWS cloud platforms.
backend-security-coder workflow skill. Use this skill when the user needs Expert in secure backend coding practices specializing in input validation, authentication, and API security. Use PROACTIVELY for backend security implementations or security code reviews and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
backend-security-coder workflow skill. Use this skill when the user needs Expert in secure backend coding practices specializing in input validation, authentication, and API security. Use PROACTIVELY for backend security implementations or security code reviews and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
Behavioral Modes - Adaptive AI Operating Modes workflow skill. Use this skill when the user needs AI operational modes (brainstorm, implement, debug, review, teach, ship, orchestrate). Use to adapt behavior based on task type and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
Behavioral Modes - Adaptive AI Operating Modes workflow skill. Use this skill when the user needs AI operational modes (brainstorm, implement, debug, review, teach, ship, orchestrate). Use to adapt behavior based on task type and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
Security Review Skill workflow skill. Use this skill when the user needs This skill ensures all code follows security best practices and identifies potential vulnerabilities. Use when implementing authentication or authorization, handling user input or file uploads, or creating new API endpoints and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
Security Review Skill workflow skill. Use this skill when the user needs This skill ensures all code follows security best practices and identifies potential vulnerabilities. Use when implementing authentication or authorization, handling user input or file uploads, or creating new API endpoints and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
AI-Powered Code Review Specialist workflow skill. Use this skill when the user needs You are an expert AI-powered code review specialist combining automated static analysis, intelligent pattern recognition, and modern DevOps practices. Leverage AI tools (GitHub Copilot, Qodo, GPT-5, C and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
AI-Powered Code Review Specialist workflow skill. Use this skill when the user needs You are an expert AI-powered code review specialist combining automated static analysis, intelligent pattern recognition, and modern DevOps practices. Leverage AI tools (GitHub Copilot, Qodo, GPT-5, C and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
Code Review Checklist workflow skill. Use this skill when the user needs Comprehensive checklist for conducting thorough code reviews covering functionality, security, performance, and maintainability and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
Code Review Checklist workflow skill. Use this skill when the user needs Comprehensive checklist for conducting thorough code reviews covering functionality, security, performance, and maintainability and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
code-reviewer workflow skill. Use this skill when the user needs Elite code review expert specializing in modern AI-powered code and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
code-reviewer workflow skill. Use this skill when the user needs Elite code review expert specializing in modern AI-powered code and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
comprehensive-review-full-review workflow skill. Use this skill when the user needs working with comprehensive review full review and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
comprehensive-review-full-review workflow skill. Use this skill when the user needs working with comprehensive review full review and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
Pull Request Enhancement workflow skill. Use this skill when the user needs > and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
Pull Request Enhancement workflow skill. Use this skill when the user needs > and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
Design Orchestration (Meta-Skill) workflow skill. Use this skill when the user needs Orchestrates design workflows by routing work through brainstorming, multi-agent review, and execution readiness in the correct order and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
Design Orchestration (Meta-Skill) workflow skill. Use this skill when the user needs Orchestrates design workflows by routing work through brainstorming, multi-agent review, and execution readiness in the correct order and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
Differential Security Review workflow skill. Use this skill when the user needs Security-focused code review for PRs, commits, and diffs and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
Differential Security Review workflow skill. Use this skill when the user needs Security-focused code review for PRs, commits, and diffs and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
Django Access Control & IDOR Review workflow skill. Use this skill when the user needs django-access-review and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
Django Access Control & IDOR Review workflow skill. Use this skill when the user needs django-access-review and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
FDA Food Safety Auditor workflow skill. Use this skill when the user needs Expert AI auditor for FDA Food Safety (FSMA), HACCP, and PCQI compliance. Reviews food facility records and preventive controls and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
FDA Food Safety Auditor workflow skill. Use this skill when the user needs Expert AI auditor for FDA Food Safety (FSMA), HACCP, and PCQI compliance. Reviews food facility records and preventive controls and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.
FDA MedTech Compliance Auditor workflow skill. Use this skill when the user needs Expert AI auditor for Medical Device (SaMD) compliance, IEC 62304, and 21 CFR Part 820. Reviews DHFs, technical files, and software validation and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off.