Skill UI

This specialist simulates the role of an App Store reviewer, auditing iOS source code and metadata against Apple's strict guidelines. It systematically identifies potential compliance risks, technical vulnerabilities, monetization gaps (IAP/Subscriptions), and critical UX shortcomings, delivering a prioritized risk register for fast approval.

Provides comprehensive patterns and techniques for securing AI agent systems. Learn how to enforce governance policies, including tool allow/block lists, content filtering, rate limiting, and human approval workflows. Essential for building robust, compliant, and trustworthy agents in multi-agent or production environments that interact with external APIs and sensitive data.

Translates every approval request, error, and technical output from Copilot CLI into clear, jargon-free English with color-coded risk cues, definitions, and step-by-step commentary for non-technical stakeholders so they always understand what happens and why.

Scans repository context and chat history to recommend awesome-copilot Custom Agent files that are missing or outdated locally, outlines relevance/rationale, and waits for user approval before installing or updating.

Implements verification gates as explicit phase checkpoints, producing acceptance checklists, CI gate configs, and manual approval rules so teams catch defects before phase transitions, covering requirements, design, implementation, integration, and deployment.

This tool automates the complete specification generation process across four core phases: Initialization, Requirements, Design, and Tasks. It supports both interactive (step-by-step approval) and automatic execution modes. After generating the full spec, it performs a final sanity review to ensure coherence and completeness, providing a ready-to-implement blueprint.

Implement robust human-in-the-loop (HITL) approval gates for sophisticated LangGraph workflows. This skill enables the graph to pause execution before critical, irreversible actions (like sending emails or calling tools). It manages complex state serialization, provides clear resume semantics using `Command(resume=...)`, and integrates with external UIs (e.g., Slack) to await human decision, ensuring safe and controlled workflow execution.

This skill manages the end-to-end Navan expense reporting workflow. It allows users to retrieve detailed transaction data via API, automate multi-level approval workflows based on configured policies, and map expenses to specific General Ledger (GL) codes. It is designed to generate journal entry payloads for seamless synchronization with major accounting systems like NetSuite, Xero, and QuickBooks, streamlining financial reconciliation.

This skill provides an advanced guide for configuring robust enterprise governance within Navan. Administrators can define granular role hierarchies (e.g., Global Admin, Department Manager), establish department-specific travel policies (such as max hotel rates or preferred chains), and implement multi-tier, automated approval workflows. Use this when establishing strict policy enforcement and complex approval chains for a large, regulated organization.

This skill provides comprehensive management for Navan organizational entities, including users, departments, cost centers, and approval chains. It supports user lifecycle management via SCIM 2.0 provisioning (integrating with Okta, Entra ID) and enables detailed auditing of user access and structural compliance. Essential for large organizations managing complex travel policies and identities.

This skill manages comprehensive identity verification using the Persona API. It covers government ID checks (passport, driver's license), selfie liveness detection, and database lookups (SSN, watchlist). Use this when implementing Know Your Customer (KYC) workflows, reviewing detailed verification results, or building custom approval logic based on multi-source identity data.

This guide demonstrates how to set up a secure and robust webhook endpoint to process identity verification events from Persona. It covers essential security practices, including HMAC signature verification using TypeScript and Express, handling critical KYC lifecycle events (like inquiry approval/declination), and implementing idempotent processing to prevent data duplication. Ideal for integrating third-party identity services into a web application.