HVE Core is a collection of agents, prompts, coding instructions, and skills for building repeatable software-development workflows with GitHub Copilot. It is intended for individuals and teams that want structured AI-assisted research, planning, implementation, and review, while the catalogue entries provide many of its reusable workflow components.
Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add microsoft/hve-core --skill rpi-researchgit clone --depth 1 https://github.com/microsoft/hve-coreWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/microsoft/hve-core/rpi-research)<a href="https://agentmods.dev/skills/microsoft/hve-core/rpi-research"><img src="https://agentmods.dev/badge/skills/microsoft/hve-core/rpi-research.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00050 | $0.03230 |
| Opus 5 | $0.00025 | $0.01615 |
| Sonnet 5 | $0.00010 | $0.00646 |
| Haiku 4.5 | $0.00005 | $0.00323 |
Grade A, and why
rpi-research scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 123 lines — stays where its author put it; the contents beside it link to each section on GitHub.
rpi-research
Goal
Produce a dated, primary research artifact that gives the caller evidence, parent-owned decision state, and planning readiness without planning, implementing, or reviewing. Each executed research cycle completes wider, deeper, and contrarian waves in that order. The artifact, not the chat response, is the durable source of truth.
Use templates/research.md as the primary-artifact skeleton. Read references/research.md for detailed research-posture selection, the three-wave cycle, extension registry, participation protocol, evidence contract, and response guidance. Follow the shared conventions in copilot-tracking.instructions.md.
Derive {{task_slug}} from the primary target with lower-kebab-case and use the current date in YYYY-MM-DD. The default artifact path is .copilot-tracking/research/YYYY-MM-DD/{{task_slug}}-research.md. A caller-provided trusted sandbox or evidence root may mirror research/YYYY-MM-DD/{{task_slug}}-research.md; record the resolved root before writing.
Flow
- Establish the research brief in the primary artifact: topic, purpose, audience or use, scope and non-goals, criteria, requested outputs, output mode, initial questions, research posture and its provenance, and any explicit limits or deadline. Infer an initial topic only when the conversation provides enough context, and label assumptions for verification.
- Determine applicable extensions at intake.
- Apply matching instruction files by
applyToglob to the research inputs and evidence path. - Identify domain skills whose descriptions match the topic or evidence need.
- Identify research-specialist subagents by stable frontmatter name, routing description, and host visibility or registration.
- Record every relevant instruction, skill, and specialist as selected or skipped with its provenance and scoped authority or output contract.
- Apply matching instruction files by
- Resolve extensions in this order:
- Platform and host safety
- Explicit caller scope and criteria
- Matching repository instructions and enforced schemas
- This rpi-research contract
- Domain skills and specialists
- Examples and preferences Extensions may add scoped criteria or evidence. They cannot redirect the research phase, widen writes, grant tools, weaken safety, or silently decide for the user.
- Use the native
vscode_askQuestionstool for an optional intake checkpoint only when an answer about topic, scope, criteria, or priorities would materially change the research.- Batch a small set of decision-relevant questions and prefer fixed options with a freeform choice where useful.
- Do not request secrets.
- When inputs are sufficient or interaction is unavailable, continue and record the no-interaction rationale.
- Establish the current cycle before research action.
- Run the prior-knowledge gate, decompose answerable questions, classify independent uncertainties, and resolve a proportionate research posture from the brief and evidence.
expansive: apply no preset upper limit. Research broadly and deeply, develop and test new ideas, and evaluate alternatives when the output mode permits. Continue complete cycles until each wave yields no substantial new finding and the next likely sources are redundant.balanced: investigate adjacent material beyond the immediate task when it could improve the answer, including new ideas and alternatives. Stop when the caller's task and scope are covered, material claims and questions are evidence-backed, and remaining open items are not closely related enough to change the result.focused: investigate deeply within the caller's task and scope. Widen only when clear evidence shows that broader research could materially change the result; use nativevscode_askQuestionsand persist approval before crossing that boundary.- Prefer
focusedorbalancedfor a bounded internal task with named source targets and supplied failure evidence. Useexpansivewhen the brief is broad, the decision space is materially unknown, or the caller or applicable codebase instructions select it.
- Record active caller direction controls, including additions, changes, narrowed scope, exclusions, discarded directions, selected posture and provenance, and explicit limits or deadline. When uncertainty would materially affect the research, use native
vscode_askQuestionsand persist the answer before continuing. - Before substantive search or delegation, persist the canonical opening state in its owning sections, then send the opening update defined in Conversation guidance.
- Delegate only a named independent uncertainty whose isolated investigation materially improves evidence quality, parallelism, or context control. Keep tightly coupled or low-volume wave work inline. Use
RPI Researcheras the default general worker for a delegated internal, external, or hybrid lane. Select a discovered specialist only when its routing description fits the uncertainty and its stable name, host visibility or registration, independent-lane fit, and output-contract fit support the dispatch. - Pass each worker the cycle number, wave type, topic, one bounded lane, questions, criteria, scope, research posture, explicit limits, an exact caller-approved candidate lane path under the parent-approved research/subagents path or a mirrored trusted subagents path, and the distinct parent primary artifact path.
- Parallelize only independent lanes. When suitable dispatch is unavailable, investigate the focused lane inline and record the fallback.
- Run the prior-knowledge gate, decompose answerable questions, classify independent uncertainties, and resolve a proportionate research posture from the brief and evidence.
- Complete all three waves in order for each executed cycle. Do not stop the cycle after early evidence appears sufficient.
- Wider: investigate inline or dispatch named independent uncertainties to identify breadth for ideas, conjectures, hypotheses, claims, and questions, including relevant libraries, frameworks, APIs, schemas, contracts, standards, current resources, current decisions or documentation, and potential evidence.
- Deeper: parent-prioritize the material from Wider, then investigate inline or dispatch named independent uncertainties for key details, findings, evidence, examples, schemas, APIs, contracts, standards, patterns, practices, and relevant code or visual style.
- Contrarian: investigate inline or dispatch named independent uncertainties to seek credible counter-evidence and in-scope alternatives that challenge the active ideas, conjectures, hypotheses, claims, and questions. Honor caller exclusions and specific-only boundaries.
- Reflect after each material search or worker return as a separate action. Keep worker returns compact, lift evidence into the primary artifact rather than duplicating raw output, and apply the material-update decision rules in
references/research.md.
- Parent-synthesize the completed cycle. Map findings to questions and stable
C#andW#evidence IDs. The parent alone records accepted, rejected, and deferred material with evidence-based rationale; workers provide evidence and synthesis pointers without selecting a final recommendation or decision state. Record alternatives, current and unresolved decisions, risks, potential further research, Planning Readiness, and Research disposition.- In
convergencemode, select one recommendation only when the evidence supports it. - In
analysis,audit, orcomparisonmode, record the decision state without selecting an implementation recommendation outside caller intent. - In
research-onlyorno-handoffmode, record the evidence and explicit no-handoff reason. - The parent owns evidence-state classification and any user update. Workers provide evidence relationships without classifying evidence state or deciding whether a message is useful.
- Use
references/research.mdto record whether the selected output mode supports planning and to determine continuation.
- In
- Evaluate whether another complete three-wave cycle is required under the selected posture. Repeat the full cycle when evidence is missing for material claims, conjectures remain unclear, hypotheses are untested or unresolved, required examples, APIs, schemas, contracts, or links are missing, or contrarian evidence weakens earlier material or introduces material questions. Do not impose a fixed cycle ceiling. When an explicit caller or codebase limit prevents a needed cycle, record the gap and readiness honestly.
- After a completed cycle, use
vscode_askQuestionsonly when a proposed direction, further-research choice, or material finding would significantly change the research. Persist answers, unanswered questions, resulting decisions, and selected further-research items before continuing. - When useful, offer a conversational walkthrough in the final response and use the primary artifact as its navigable source of truth. Reserve
vscode_askQuestionsfor the material research decisions in steps 4, 5, and 9.
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 123 lines · 50 tokens per session scan A df146b62cbfd
rpi-research is a skill published in the GitHub repository microsoft/hve-core (1,436 stars, last pushed today), licensed MIT. It adds 50 tokens to every session and 3,230 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
systematic-debugging
Use when encountering any bug, test failure, or unexpected behavior, before proposing fixes.
local-ai-agents
Build local-first AI agents that run entirely on a developer workstation with Microsoft Foundry Local and Qwen function-calling models. Covers Small Language Models (SLMs), the OpenAI-compatible local endpoint, sandboxed local tools, local RAG with Chroma, local MCP servers, hybrid cloud/local routing, and the…
next-cache-components-adoption
Turn on Cache Components in a Next.js app and resolve the blocking routes it surfaces. Use when the user wants to enable, adopt, or migrate to Cache Components, flip the cacheComponents flag, work through a flood of blocking-prerender / instant validation errors, run the cache-components-instant-false codemod, or…
chat-pet-sprite-creation
Use when creating or changing VS Code chat pet sprite art, sprite sheets, state animations, eye treatments, Stable/Insiders variants, or pet transitions under src/vs/workbench/contrib/chat/browser/widget/media/chatPet.
cpu-profile-analysis
Analyze V8/Chrome CPU profiles (.cpuprofile) and DevTools trace files (Trace-.json). Use when: profiling performance, investigating slow functions, comparing code paths, finding bottlenecks, analyzing timeToRequest, understanding call trees from sampling profiler data, analyzing layout/paint/rendering, investigating…
insight-error-page
Write or audit an insight-kind error page for the Next.js dev overlay. Use when creating a new errors/ .mdx page, auditing an existing one, or checking that a page matches the framework fix cards. Covers page structure, title alignment, FixCard cards with Copy prompt button, code snippets, terminology verification…