Skills
This page lists the generated reference documentation for HVE Core skills.
| Asset | Description |
|---|---|
| accessibility | Consolidated accessibility skill entrypoint for WCAG 2.2, ARIA Authoring Practices, cognitive accessibility, Section 508, EN 301 549, and the Accessibility Planner workflow. |
| code-review | Review code changes from multiple perspectives with context bootstrap, depth-tier rigor, and structured findings output. |
| python-foundational | Foundational Python best practices, idioms, and code quality fundamentals |
| dt-coaching-foundation | Design Thinking coaching foundation knowledge: coach identity and philosophy, quality and fidelity constraints, method sequencing, coaching state schema, and the canonical deck workflow |
| dt-curriculum | Design Thinking learning curriculum covering nine progressive modules across the full Problem, Solution, and Implementation Space methods plus a shared manufacturing reference scenario for teaching and practice |
| dt-methods | Design Thinking method coaching knowledge across all nine methods including per-method techniques, deep expertise, and industry context (energy, financial services, healthcare, manufacturing, nonprofit and social impact, pharmaceuticals and life sciences, professional services, public sector, retail and CPG) |
| .Github/Skills/Design Thinking/Dt Methods/References/Dt Coach Telemetry | Design Thinking Coach telemetry overlay applying telemetry-foundations vocabulary to DT session artifacts |
| dt-rpi-integration | Design Thinking to RPI handoff knowledge covering the DT-to-RPI handoff contract, DT-aware research/planning/implement/review contexts, subagent handoff workflow, and Method 5 image prompt generation |
| caveman | Ultra-compressed response style that reduces output token count while preserving technical accuracy, with intensity levels and auto-clarity safety rules |
| customer-card-render | Generate customer-card PowerPoint content YAML from Design Thinking canonical artifacts and build using the shared PowerPoint skill pipeline |
| mural | Mural workspace, room, mural, and widget workflows via the Mural REST API exposed through a Python CLI. Use when you need to read or write Mural content or automate widget creation. |
| powerpoint | PowerPoint slide deck generation and management using python-pptx with YAML-driven content and styling |
| tts-voiceover | Text-to-speech voice-over generation from YAML speaker notes using Azure Speech SDK with SSML pronunciation control |
| video-to-gif | Video-to-GIF conversion with FFmpeg two-pass optimization |
| vscode-playwright | VS Code screenshot capture using Playwright MCP with serve-web for slide decks and documentation |
| gh-code-scanning | Retrieves and groups GitHub code scanning alerts by rule and severity using the gh CLI |
| gitlab | Manage GitLab merge requests and pipelines with a Python CLI |
| architecture-diagrams | Architecture diagram authoring for cloud infrastructure: parse Azure IaC, map relationships, and render either ASCII block diagrams or Mermaid flowcharts based on the caller's chosen output format |
| documentation | Canonical documentation capability for audit, drift, validate, and author modes in hve-core. |
| prompt-analyze | Execute prompt evaluation for existing prompt artifacts and produce an analysis report without modifying files. |
| prompt-builder | Create or update prompt artifacts through the full prompt-builder phase loop, routing refactor and analyze requests to the specialized skills. |
| prompt-refactor | Refactor existing prompt artifacts against explicit requirements through the full prompt-builder loop. |
| vally-tests | Authors Vally conformance tests for prompts, instructions, agents, and skills, including refusals for jailbreak, prompt-injection, harmful-elicitation, TOS, CoC, and PII-extraction stimuli |
| hve-core-installer | Decision-driven HVE-Core installer with multiple clone-based and extension install methods, environment detection, and agent customization |
| jira | Jira issue workflows for search, issue updates, transitions, comments, and field discovery via the Jira REST API. Use when you need to search with JQL, inspect an issue, create or update work items, move an issue between statuses, post comments, or discover required fields for issue creation. |
| adr-author | Authoring skill for Architecture Decision Records (ADRs) supporting capture, from-planner-handoff, and adopt-template entry modes with selectable Y-Statement or MADR v4.0.0 output templates, supersession lineage, and ASR trigger evaluation. |
| privacy-standards | Privacy planning reference for data-flow reasoning, standards mapping, and DPIA thresholds |
| rai-planner | On-demand RAI planner reference pack covering Phase 1 capture, Phase 2 risk classification, Phase 5 impact assessment, and Phase 6 review and backlog handoff. |
| requirements-author | Requirements authoring guide for BRD and PRD across Discover, Define, and Govern with canonical templates and handoff contracts |
| security-planning | Security planning reference set for operational buckets, STRIDE analysis, standards mapping, NIST control families, and backlog scaffolding. |
| rai-standards | Consolidated Responsible AI standards reference: NIST AI RMF 1.0, AI STRIDE threat-modeling overlay, EU AI Act risk tiers, and an open-standards catalog with phase mapping |
| rpi-implement | Execute approved implementation phases, update tracking artifacts, and hand off review-ready results. |
| rpi-plan | Create implementation-ready planning artifacts and validation evidence for RPI tasks. |
| rpi-quick | Umbrella RPI playbook that sequences Research, Plan, Implement, Review, and Discover for one-shot task execution with quality gates. |
| rpi-research | Research-only RPI playbook that gathers task evidence, writes dated research artifacts under .copilot-tracking/research/, and hands off planning-ready findings. Use when the user needs evidence, alternatives, or task framing first. |
| rpi-review | Review-only RPI playbook that validates implementation evidence, checks phase completion, and closes the loop with explicit next steps. Use when the user needs review coverage or acceptance evidence. |
| owasp-agentic | OWASP Agentic Security Top 10 knowledge base for identifying, assessing, and remediating AI agent system security risks. |
| owasp-cicd | OWASP CI/CD Top 10 knowledge base for identifying, assessing, and remediating CI/CD pipeline security risks. |
| owasp-docker | OWASP Docker Top 6 knowledge base for identifying, assessing, and remediating Docker container security risks. |
| owasp-infrastructure | OWASP Infrastructure Top 10 knowledge base for identifying, assessing, and remediating internal IT infrastructure security risks. |
| owasp-llm | OWASP Top 10 for LLM Applications (2025) knowledge base for identifying, assessing, and remediating large language model security risks. |
| owasp-mcp | OWASP MCP Top 10 knowledge base for identifying, assessing, and remediating Model Context Protocol security risks. |
| owasp-top-10 | OWASP Top 10 for Web Applications (2025) knowledge base for identifying, assessing, and remediating web application security risks. |
| secure-by-design | Secure by Design principles knowledge base for assessing security-first design, development, and deployment across the software lifecycle. |
| security-reviewer-formats | Format specifications and data contracts for the security reviewer orchestrator and its subagents. |
| supply-chain-security | Software supply chain security reference for OpenSSF Scorecard, SLSA, Sigstore, SBOM, and posture/backlog taxonomies. |
| vex | OpenVEX v0.2.0 specification reference plus VEX management playbooks - Brought to you by microsoft/hve-core. |
| backlog-templates | Shared work-item templates and conventions for ADO and GitHub backlog handoff across the RAI, Security, SSSC, Accessibility, and Privacy planners |
| pr-reference | Generates PR reference XML with commit history and unified diffs between branches, with extension and path filtering. Use when creating pull request descriptions, preparing code reviews, analyzing branch changes, discovering work items from diffs, or generating structured diff summaries. |
| telemetry-foundations | Declarative OpenTelemetry-aligned telemetry vocabulary and instrumentation conventions for traces, metrics, logs, and PII handling |