Skill Claude Code ✓ vendor
RAI Planner identity protocol and on-demand reference pack covering Phase 1 capture, Phase 2 risk classification and the optional Mural board bootstrap, Phase 5 impact assessment, and Phase 6 review and backlog handoff.
Skill Claude Code ✓ vendor
Requirements authoring guide for BRD and PRD across Discover, Define, and Govern with canonical templates and handoff contracts.
Skill Claude Code needs its repo ✓ vendor
Security planning and plan-drift analysis for STRIDE, standards, controls, backlog handoff, current findings, and TM7 generation.
Agent Claude Code ✓ vendor
Assesses open GitHub issues for backlog health and returns bounded advisory reports without mutating candidate issues.
Skill Claude Code ✓ vendor
Consolidated Responsible AI standards reference: NIST AI RMF 1.0, AI STRIDE threat-modeling overlay, EU AI Act risk tiers, and an open-standards catalog with phase mapping.
Skill Claude Code ✓ vendor
Challenge a confirmed task, decision, plan, or artifact through adaptive skeptical questions. Use when you need to expose assumptions before acting.
Skill Claude Code ✓ vendor
Follow an approved RPI plan, keep it current as new information comes to light, check off completed work, and keep a condensed changes log. Use when implementation is ready to begin or resume.
Skill Claude Code ✓ vendor
Independently assess an RPI plan without editing it. Use when an implementation-ready plan needs a credibility check or a revised plan needs its earlier findings reconciled.
Skill Claude Code ✓ vendor
Create or resume an evidence-based RPI implementation plan with an optional independent critique. Use when a task needs an implementation plan or an existing plan needs revision.
Skill Claude Code ✓ vendor
Research-only RPI playbook that gathers task evidence, writes dated research artifacts under .copilot-tracking/research/ or a caller's trusted evidence root, and hands off planning-ready findings. Use when the user needs evidence, alternatives, or task framing first.
Skill Claude Code ✓ vendor
Compare RPI planning and implementation evidence, record review findings, and route follow-up work. Use when an implementation needs acceptance review.
Skill Claude Code ✓ vendor
Guided, conversational walkthrough that explains code, UI, UX, features, or .copilot-tracking artifacts with navigable evidence links, a deep review before explaining, and a reconciled decisions-and-changes ledger. Use when the user wants to understand how something works or why it was changed.
Skill Claude CodeCodex ✓ vendor
Retrieves and groups GitHub code scanning alerts by rule and severity using the gh CLI.
Skill Claude Code ✓ vendor
Microsoft Cloud Security Benchmark (MCSB v2) control-domain taxonomy and NIST 800-53 / CIS Controls crosswalk for planning and reviewing Azure cloud resources.
Skill Claude Code ✓ vendor
OWASP Agentic Security Top 10 knowledge base for identifying, assessing, and remediating AI agent system security risks.
Skill Claude Code ✓ vendor
OWASP CI/CD Top 10 knowledge base for identifying, assessing, and remediating CI/CD pipeline security risks.
Skill Claude Code ✓ vendor
OWASP Docker Top 6 knowledge base for identifying, assessing, and remediating Docker container security risks.
Skill Claude Code ✓ vendor
OWASP Infrastructure Top 10 knowledge base for identifying, assessing, and remediating internal IT infrastructure security risks.
Skill Claude Code ✓ vendor
OWASP Top 10 for LLM Applications (2025) knowledge base for identifying, assessing, and remediating large language model security risks.
Skill Claude Code ✓ vendor
OWASP MCP Top 10 knowledge base for identifying, assessing, and remediating Model Context Protocol security risks.
Skill Claude Code ✓ vendor
OWASP Top 10 for Web Applications (2025) knowledge base for identifying, assessing, and remediating web application security risks.
Skill Claude Code ✓ vendor
Secure by Design principles knowledge base for assessing security-first design, development, and deployment across the software lifecycle.
Skill Claude Code ✓ vendor
Format specifications and data contracts for the security reviewer orchestrator and its subagents.
Skill Claude Code ✓ vendor
Software supply chain security reference for OpenSSF Scorecard, SLSA, Sigstore, SBOM, and posture/backlog taxonomies.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: