Microsoft Cloud Security Benchmark (MCSB v2) control-domain taxonomy and NIST 800-53 / CIS Controls crosswalk for planning and reviewing Azure cloud resources.
Quellsprache: Englisch
Menü
Skills in diesem Repository
SkillsMP hat 72 Skills aus microsoft/hve-core gesammelt. Öffne einen Skill, um Quelle und Details zu prüfen.
microsoft/hve-coreEs werden 32 von 72 gesammelten Skills angezeigt.
Microsoft Cloud Security Benchmark (MCSB v2) control-domain taxonomy and NIST 800-53 / CIS Controls crosswalk for planning and reviewing Azure cloud resources.
Quellsprache: Englisch
Performance, load, and reliability (SLO/SRE) planning for production readiness. Use when defining service level objectives, load characterization, capacity, latency budgets, stress/soak/spike test plans, false-positive baselines, and reliability targets. USE…
Quellsprache: Englisch
Design Thinking handoff knowledge for research-ready rpi-research inputs and DT-aware rpi-plan, rpi-implement, and rpi-review context
Quellsprache: Englisch
Compatibility alias for read-only prompt artifact review. Routes static and behavior analysis to hve-builder review mode.
Quellsprache: Englisch
Compatibility alias for legacy prompt-building requests. Routes creation and improvement to the hve-builder skill.
Quellsprache: Englisch
Compatibility alias for behavior-preserving prompt artifact cleanup. Routes refactoring to hve-builder refactor mode.
Quellsprache: Englisch
Consolidated Responsible AI standards reference: NIST AI RMF 1.0, AI STRIDE threat-modeling overlay, EU AI Act risk tiers, and an open-standards catalog with phase mapping
Quellsprache: Englisch
Challenge a confirmed task, decision, plan, or artifact through adaptive skeptical questions. Use when you need to expose assumptions before acting.
Quellsprache: Englisch
Execute an approved RPI plan, maintain current planning state, and record implementation evidence. Use when implementation is ready to begin or resume.
Quellsprache: Englisch
Independently critique an RPI plan and phase details against supplied evidence without editing plan sources. Use when planning credibility needs a read-only assessment.
Quellsprache: Englisch
Create evidence-based RPI plans and phase details from supplied context, research, drafts, and decisions. Use when implementation planning is needed.
Quellsprache: Englisch
Sequence Research, Plan, Implement, Review, and Follow-up for an RPI task. Use when one workflow should coordinate the full delivery lifecycle.
Quellsprache: Englisch
Research-only RPI playbook that gathers task evidence, writes dated research artifacts under .copilot-tracking/research/, and hands off planning-ready findings. Use when the user needs evidence, alternatives, or task framing first.
Quellsprache: Englisch
Compare RPI planning and implementation evidence, record review findings, and route follow-up work. Use when an implementation needs acceptance review.
Quellsprache: Englisch
Guided, conversational walkthrough that explains code, UI, UX, features, or .copilot-tracking artifacts with navigable evidence links, deep subagent review, and a reconciled decisions-and-changes ledger. Use when the user wants to understand how something…
Quellsprache: Englisch
Privacy planning reference for data-flow reasoning, standards mapping, and DPIA thresholds
Quellsprache: Englisch
Foundational Python best practices, idioms, and code quality fundamentals
Quellsprache: Englisch
Video-to-GIF conversion with FFmpeg two-pass optimization
Quellsprache: Englisch
Generates PR reference XML with commit history and unified diffs between branches, with extension and path filtering. Use when creating pull request descriptions, preparing code reviews, analyzing branch changes, discovering work items from diffs, or…
Quellsprache: Englisch
Design Thinking learning curriculum covering nine progressive modules across the full Problem, Solution, and Implementation Space methods plus a shared manufacturing reference scenario for teaching and practice
Quellsprache: Englisch
Ultra-compressed response style that reduces output token count while preserving technical accuracy, with intensity levels and auto-clarity safety rules
Quellsprache: Englisch
VS Code screenshot capture using Playwright MCP with serve-web for slide decks and documentation
Quellsprache: Englisch
Software supply chain security reference for OpenSSF Scorecard, SLSA, Sigstore, SBOM, and posture/backlog taxonomies.
Quellsprache: Englisch
Declarative OpenTelemetry-aligned telemetry vocabulary and instrumentation conventions for traces, metrics, logs, and PII handling
Quellsprache: Englisch
OWASP Agentic Security Top 10 knowledge base for identifying, assessing, and remediating AI agent system security risks.
Quellsprache: Englisch
OWASP CI/CD Top 10 knowledge base for identifying, assessing, and remediating CI/CD pipeline security risks.
Quellsprache: Englisch
OWASP Infrastructure Top 10 knowledge base for identifying, assessing, and remediating internal IT infrastructure security risks.
Quellsprache: Englisch
OWASP Top 10 for LLM Applications (2025) knowledge base for identifying, assessing, and remediating large language model security risks.
Quellsprache: Englisch
OWASP MCP Top 10 knowledge base for identifying, assessing, and remediating Model Context Protocol security risks.
Quellsprache: Englisch
OWASP Top 10 for Web Applications (2025) knowledge base for identifying, assessing, and remediating web application security risks.
Quellsprache: Englisch
Secure by Design principles knowledge base for assessing security-first design, development, and deployment across the software lifecycle.
Quellsprache: Englisch
Format specifications and data contracts for the security reviewer orchestrator and its subagents.
Quellsprache: Englisch