Skill UI

This skill performs a comprehensive security audit of Model Context Protocol (MCP) server configurations found in .mcp.json files. It is designed to identify critical vulnerabilities, including hardcoded secrets (API keys, tokens), dangerous shell injection patterns, unpinned dependencies, and compliance issues regarding approved server lists. Use this skill during security reviews, project onboarding, or pre-commit checks to ensure secure deployment.

Leverage AI-powered exploratory testing to thoroughly audit web applications and verify functionality. This skill simulates user interaction, detecting complex bugs, validating critical flows (like checkout or login), and checking accessibility compliance. Use it proactively after development to ensure quality before deployment.

This specialist simulates the role of an App Store reviewer, auditing iOS source code and metadata against Apple's strict guidelines. It systematically identifies potential compliance risks, technical vulnerabilities, monetization gaps (IAP/Subscriptions), and critical UX shortcomings, delivering a prioritized risk register for fast approval.

Checks AI agent implementations against the OWASP Agentic Security Initiative Top 10 risks, producing findings on controls, vulnerabilities, and recommendations for prompt injection, tool governance, escalation, logging, identity, policy, supply chain, and behavioral monitoring before production or audit.

This skill provides comprehensive governance for Power Automate flows and Power Apps. It allows users to classify flows by business impact, detect orphaned resources, audit connectors, and enforce compliance by writing essential metadata to a cached store. It is ideal for IT governance teams needing centralized control and deep insight into automation assets without relying on Dataverse or the CoE Starter Kit.

A comprehensive guide for engineers, architects, and DevOps teams on implementing General Data Protection Regulation (GDPR) best practices. This skill covers Privacy by Design, data minimization, purpose limitation, retention policies, secure API design, and compliant logging practices. Use it when handling any personal data, designing new features, or reviewing systems for data privacy compliance.

Provides comprehensive, enterprise-level monitoring for all Power Automate flows across an entire tenant. Using a cached store, it tracks failure rates, run health trends, asset inventory (makers, apps, connections), and compliance reports without hitting API rate limits. Ideal for governance teams needing an aggregated view of platform health and root-cause analysis.

Deploy and govern MCP declarative agents within the Microsoft 365 admin center, managing their lifecycle, assignments, access controls, and compliance so Copilot delivers organizational capabilities securely.

This skill provides advanced architectural guidelines for generating premium, award-level web experiences. It guides code generation beyond basic HTML/CSS, focusing on creating immersive digital environments. Key areas include sophisticated motion design (scroll-driven narratives, micro-interactions), establishing strong visual identities (e.g., Brutalism, Glassmorphism), and enforcing strict performance best practices like hardware acceleration and accessibility compliance.

A comprehensive toolkit for automating email workflows using SendGrid's API. It allows users to manage the entire email lifecycle, including setting up verified sender identities, creating and sending targeted marketing campaigns (Single Sends), and maintaining contact and list data. Use cases range from bulk contact list management to detailed campaign analytics and compliance adherence.

A comprehensive, five-stage methodology for reviewing code quality. This process systematically checks for requirements compliance, logical correctness, code maintainability, test coverage, and critical security/performance vulnerabilities. It provides actionable feedback categorized by severity (Blocker, Major, Minor, Nit), ensuring high standards for all merged code.

Provides a comprehensive audit of a UI component or page to ensure WCAG 2.2 AA accessibility compliance. This tool systematically checks for critical issues like insufficient color contrast, poor keyboard navigability, missing alt text, and non-semantic HTML usage. It helps developers integrate robust accessibility checks directly into their design system workflow, improving product usability for all users.