GitHub Copilot skills: 1003 worth installing

Guides building with shadcn/ui components: discovery, installation, customisation and best practices.

Converts frontend code from Vite, React, Angular or Vue into a Stitch design.

Extracts a design system from frontend source code into a DESIGN.md file.

Generates new screens from text prompts or images and edits existing ones with Stitch MCP.

Analyses Stitch projects and writes their design system into DESIGN.md files.

Turns a vague UI idea into a detailed prompt optimised for Stitch, with design system context.

Teaches an agent to build a website iteratively with Stitch, using an autonomous baton-passing loop.

Generates DESIGN.md files for Google Stitch that enforce strict typography, calibrated colour and asymmetric layouts.

Audits GitHub Actions workflows for vulnerabilities in AI agent integrations such as Claude Code Action and Codex.

Builds an understanding of a codebase before an audit: what each function assumes, guarantees and depends on.

Detects timing side-channel vulnerabilities in cryptographic code written in C, C++, Go and other languages.

Creates devcontainers with Claude Code, language tooling for Python, Node, Rust or Go, and persistent volumes.

Identifies the state-changing entry points of a smart contract codebase and groups them by access level.

Verifies suspected security bugs one by one and gives a true or false positive verdict with evidence.

Makes the agent use the authenticated gh CLI for GitHub URLs, pull requests and issues instead of unauthenticated fetches.

Configures Python projects with uv, ruff and ty, including migration from pip, Poetry, mypy and black.

Configures mutation testing campaigns with mewt or muton and analyses the surviving mutants.

Writes, reviews and debugs property-based tests with Hypothesis, fast-check, proptest and similar tools.

Gets an independent code review of your changes from Codex or Antigravity.

Creates custom Semgrep rules that detect security vulnerabilities and bug patterns.

Identifies error-prone APIs, dangerous configurations and designs that invite security mistakes.

Checks code against its specification: which requirements hold, which are contradicted and which are missing.

Scans a codebase for security vulnerabilities with CodeQL's data flow and taint tracking analysis.

Parses, aggregates and deduplicates SARIF files from static analysis tools such as CodeQL and Semgrep.