30 skills for GitHub Copilot
Review an Angular change for standalone components, signals, zoneless updates, and Signal Forms. Use for an Angular code review. Do not use for a new NgModule-first app or a non-Angular repository.
# Angular Code Review Skill for Copilot
## Install
Install the native export at `.github/skills/angular-code-review/SKILL.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# Angular Code Review Skill for Copilot
Copilot skill `angular-code-review` for Angular. The description decides when Copilot loads it. Keep this copy under `.github/skills`.
## When to run
Run this review for an Angular change: a component, a form, a route, or "is this still the old style".
## When to leave it
Stop for a non-Angular repository. Do not upgrade Angul...Review a Django change for permission checks, ORM query shape, and migration behavior. Use for a Django security review. Do not use for a non-Django project or to assume a database cascade runs Django signals.
# Django Security Review Skill for Copilot
## Install
Install the native export at `.github/skills/django-security-review/SKILL.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# Django Security Review Skill for Copilot
Copilot skill `django-security-review` for Django. The description decides when Copilot loads it. Keep this copy under `.github/skills`.
## When to run
Run this review for a Django view, model, form, or migration.
## When to leave it
Stop for a non-Django repository. Do not upgrade Django or run a migration against pr...Review a Dockerfile or Compose file for root runtime, latest tags, secrets in layers, and the Docker socket. Use for a Docker security review. Do not use for a non-container change or to mount the Docker socket into an app container.
# Docker Security Review Skill for Copilot
## Install
Install the native export at `.github/skills/docker-security-review/SKILL.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# Docker Security Review Skill for Copilot
Copilot skill `docker-security-review` for Docker. The description decides when Copilot loads it. Keep this copy under `.github/skills`.
## When to run
Run this review for a Dockerfile, a Compose file, or a request to "check the image".
## When to leave it
Do not upgrade dependencies or the framework version unless th...Review a .NET change for async cancellation, endpoint authorization, and C# syntax the target framework does not have. Use for a .NET code review. Do not use for a non-.NET repository or to retarget the TFM unasked.
# .NET Code Review Skill for Copilot
## Install
Install the native export at `.github/skills/dotnet-code-review/SKILL.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# .NET Code Review Skill for Copilot
Copilot skill `dotnet-code-review` for .NET. The description decides when Copilot loads it. Keep this copy under `.github/skills`.
## When to run
Run this review for a .NET or C# change: an endpoint, an EF query, or an async method.
## When to leave it
Stop for a non-.NET repository. Do not change `TargetFramework` unless the user as...Review an Express app for middleware order, Express 5 route syntax, validation, and auth. Use for an Express security review. Do not use for a Fastify or NestJS app, or to forward errors twice.
# Express Security Review Skill for Copilot
## Install
Install the native export at `.github/skills/express-security-review/SKILL.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# Express Security Review Skill for Copilot
Copilot skill `express-security-review` for Express. The description decides when Copilot loads it. Keep this copy under `.github/skills`.
## When to run
Run this review for an Express router, middleware order, or an Express 4 to 5 migration.
## When to leave it
Stop for Fastify, Nest, or another framework. Do not ...Review a FastAPI change for Pydantic validation, auth dependencies, and blocking work in async routes. Use for a FastAPI security review. Do not use for a non-FastAPI Python script or to expose a hidden field in a response model.
# FastAPI Security Review Skill for Copilot
## Install
Install the native export at `.github/skills/fastapi-security-review/SKILL.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# FastAPI Security Review Skill for Copilot
Copilot skill `fastapi-security-review` for FastAPI. The description decides when Copilot loads it. Keep this copy under `.github/skills`.
## When to run
Run this review for a FastAPI route, a Pydantic model, or a request to "check the API auth".
## When to leave it
Stop for a Python script that is not a FastAPI ap...Write a Flutter widget or unit test for a behavior, including the mounted check after an await. Use when the user asks for Flutter tests. Do not use for a non-Flutter repository or to edit a generated file.
# Flutter Test Writer Skill for Copilot
## Install
Install the native export at `.github/skills/flutter-test-writer/SKILL.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# Flutter Test Writer Skill for Copilot
Copilot skill `flutter-test-writer` for Flutter. The description decides when Copilot loads it. Keep this copy under `.github/skills`.
## When to run
Run this when the user wants a Flutter test: a widget test, a unit test, or a regression for a UI bug.
## When to leave it
Stop for a non-Flutter repository. Do not add an integr...Review a Go change for ignored errors, goroutine leaks, and context that is not canceled. Use for a Go code review. Do not use for a non-Go repository or to enable an experimental flag by default.
# Go Code Review Skill for Copilot
## Install
Install the native export at `.github/skills/go-code-review/SKILL.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# Go Code Review Skill for Copilot
Copilot skill `go-code-review` for Go. The description decides when Copilot loads it. Keep this copy under `.github/skills`.
## When to run
Run this review for a Go change: a handler, a worker, a package, or "check the error paths".
## When to leave it
Stop for a non-Go repository. Do not bump the `go` line in `go.mod` unless the user asked....Review a Kotlin change for coroutine cancellation, lifecycle-aware flows, and null assertions. Use for a Kotlin code review. Do not use for a non-Kotlin repository or to swallow CancellationException.
# Kotlin Code Review Skill for Copilot
## Install
Install the native export at `.github/skills/kotlin-code-review/SKILL.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# Kotlin Code Review Skill for Copilot
Copilot skill `kotlin-code-review` for Kotlin. The description decides when Copilot loads it. Keep this copy under `.github/skills`.
## When to run
Run this review for a Kotlin coroutine, a Flow, a Compose screen, or an Android lifecycle change.
## When to leave it
Stop for a non-Kotlin repository. Do not upgrade Kotlin or Compos...Review a Laravel change for policies, Form Request validation, and mass assignment. Use for a Laravel security review. Do not use for a non-Laravel PHP script or to run a migration against production.
# Laravel Security Review Skill for Copilot
## Install
Install the native export at `.github/skills/laravel-security-review/SKILL.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# Laravel Security Review Skill for Copilot
Copilot skill `laravel-security-review` for Laravel. The description decides when Copilot loads it. Keep this copy under `.github/skills`.
## When to run
Run this review for a Laravel controller, Form Request, policy, Eloquent write, or job.
## When to leave it
Stop for PHP that is not Laravel. Do not upgrade Larav...Review an MCP server for spec compatibility, schema checks, and tool permissions. Use for an MCP security review. Do not use for a generic HTTP API, or to pass a user's token through to an untrusted tool.
# MCP Security Review Skill for Copilot
## Install
Install the native export at `.github/skills/mcp-security-review/SKILL.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# MCP Security Review Skill for Copilot
Copilot skill `mcp-security-review` for MCP. The description decides when Copilot loads it. Keep this copy under `.github/skills`.
## When to run
Run this review for an MCP server: a new tool, a transport, a spec bump, or "what can this tool do".
## When to leave it
Do not upgrade dependencies or the framework version unless t...Review a NestJS change for unregistered providers, DTO validation, and unguarded routes. Use for a NestJS security review. Do not use for a non-NestJS TypeScript API or to treat a TypeScript interface as runtime validation.
# NestJS Security Review Skill for Copilot
## Install
Install the native export at `.github/skills/nestjs-security-review/SKILL.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# NestJS Security Review Skill for Copilot
Copilot skill `nestjs-security-review` for NestJS. The description decides when Copilot loads it. Keep this copy under `.github/skills`.
## When to run
Run this review for a NestJS controller, module, DTO, or guard.
## When to leave it
Stop for an Express app that does not use Nest. Do not upgrade Nest unless the user...Review a Next.js App Router change for structure, Server Actions, data fetching, security, and tests. Use for a Next.js code review or a pre-merge check. Do not use for a CSS-only tweak, a non-Next.js repository, or a major upgrade nobody asked for.
# Next.js Code Review Skill for Copilot
## Install
Install the native export at `.github/skills/nextjs-code-review/SKILL.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# Next.js Code Review Skill for Copilot
Copilot skill `nextjs-code-review` for Next.js. The description decides when Copilot loads it. Keep this copy under `.github/skills`.
## When to run
Run this review for a Next.js change: a pull request, a feature, or a request to "review the app", "check this route", or "look at the server actions". Cover structure, data, auth, a...Audit a Node.js service for event-loop blocking, missing cancellation, and unbounded streams or retries. Use for a Node.js performance audit. Do not use for a browser-only bug or a non-Node repository.
# Node.js Performance Audit Skill for Copilot
## Install
Install the native export at `.github/skills/nodejs-performance-audit/SKILL.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# Node.js Performance Audit Skill for Copilot
Copilot skill `nodejs-performance-audit` for Node.js. The description decides when Copilot loads it. Keep this copy under `.github/skills`.
## When to run
Run this audit when a Node.js service is slow, timing out, or leaking work after the client disconnects. Also run it for "check the event loop" or "this handl...Audit a Nuxt app for duplicate SSR fetches, unstable payload keys, and private runtime config leaking to the client. Use for a Nuxt performance audit. Do not use for a non-Nuxt Vue app or to enable experimental routeTypedFetch unasked.
# Nuxt Performance Audit Skill for Copilot
## Install
Install the native export at `.github/skills/nuxt-performance-audit/SKILL.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# Nuxt Performance Audit Skill for Copilot
Copilot skill `nuxt-performance-audit` for Nuxt. The description decides when Copilot loads it. Keep this copy under `.github/skills`.
## When to run
Run this audit when a Nuxt page is slow, double-fetches, hydrates badly, or might be leaking config.
## When to leave it
Stop for a Vue app that is not Nuxt. Do not upgr...Write a Playwright regression test that reproduces a bug with locators and web-first assertions. Use when the user asks for a Playwright test or an end-to-end case. Do not use for unit tests in another runner or a non-browser bug.
# Playwright Test Writer Skill for Copilot
## Install
Install the native export at `.github/skills/playwright-test-writer/SKILL.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# Playwright Test Writer Skill for Copilot
Copilot skill `playwright-test-writer` for Playwright. The description decides when Copilot loads it. Keep this copy under `.github/skills`.
## When to run
Run this when the user wants a Playwright test, a regression for a UI bug, or an end-to-end case. The result is a spec that fails before the fix and passes after it....Review a Prisma schema, migration, or query for data loss, N+1 reads, and unsafe raw SQL. Use for a Prisma code review. Do not use to apply a migration to production or to upgrade onto the Prisma 8 release candidate.
# Prisma Code Review Skill for Copilot
## Install
Install the native export at `.github/skills/prisma-code-review/SKILL.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# Prisma Code Review Skill for Copilot
Copilot skill `prisma-code-review` for Prisma. The description decides when Copilot loads it. Keep this copy under `.github/skills`.
## When to run
Run this review for a Prisma schema change, a migration, a query, or "is this safe to migrate".
## When to leave it
Stop if the user asks you to apply the migration to production or t...Add or extend pytest coverage for a Python change, using the project's uv environment and Ruff. Use when the user asks for Python tests or a failing case. Do not use for a non-Python repository or to upgrade the interpreter unasked.
# Python Test Writer Skill for Copilot
## Install
Install the native export at `.github/skills/python-test-writer/SKILL.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# Python Test Writer Skill for Copilot
Copilot skill `python-test-writer` for Python. The description decides when Copilot loads it. Keep this copy under `.github/skills`.
## When to run
Run this when the user asks for tests, a regression case, or coverage for a Python change. Write pytest tests against the behavior, using the project's uv environment.
## When to leave...Review a Rails change for authorization, strong parameters, query counts, and job retries. Use for a Rails code review. Do not use for a non-Rails Ruby script or to migrate production.
# Rails Code Review Skill for Copilot
## Install
Install the native export at `.github/skills/rails-code-review/SKILL.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# Rails Code Review Skill for Copilot
Copilot skill `rails-code-review` for Rails. The description decides when Copilot loads it. Keep this copy under `.github/skills`.
## When to run
Run this review for a Rails model, controller, migration, or job.
## When to leave it
Stop for Ruby that is not Rails. Do not upgrade Rails or migrate production.
## Steps
1. Read the Ra...Audit a React UI for wasted renders, effect loops, hydration mismatches, and heavy client work. Use for a React performance audit or a slow-page review. Do not use for a non-React codebase or a styling-only tweak.
# React Performance Audit Skill for Copilot
## Install
Install the native export at `.github/skills/react-performance-audit/SKILL.md`.
Copy that export, not this catalog file. Catalog fields such as `tools` and `author` are for presets.dev.
Install one skill file per name. Cursor, GitHub Copilot, Codex, Antigravity CLI, and Devin can all read `.agents/skills`, so a second copy with the same name collides.
<!-- native:start -->
# React Performance Audit Skill for Copilot
Copilot skill `react-performance-audit` for React. The description decides when Copilot loads it. Keep this copy under `.github/skills`.
## When to run
Run this audit when a React screen is slow, janky, or re-rendering more than the interaction needs. Also run it for "why is this page heavy" or "check the render cost...Loading all presets…