<!-- markdownlint-disable-file -->
# HVE Core All

Full bundle of all stable HVE Core agents, prompts, instructions, and skills

## Overview

HVE Core provides the complete collection of AI chat agents, prompts, instructions, and skills for VS Code with GitHub Copilot. This edition includes every artifact across all domains: development workflows, architecture, Azure DevOps, data science, design thinking, security, and more.

Use this edition when you want access to everything without choosing a focused collection.

> [!CAUTION]
> This collection includes security, responsible AI, and supply chain security agents and prompts that are **assistive tools only**. They do not replace professional security tooling (SAST, DAST, SCA, penetration testing, compliance scanners) or qualified human review. All AI-generated security and compliance artifacts **must** be reviewed and validated by qualified professionals before use. AI outputs may contain inaccuracies, miss critical threats, or produce recommendations that are incomplete or inappropriate for your environment.

Code review agents included (via coding-standards collection):

- **Functional Code Review** — Pre-PR branch diff reviewer for functional correctness, error handling, edge cases, and testing gaps

Security and planning agents included (via security collection):

- **Security Planner** — STRIDE-based security model analysis with operational bucket classification, standards mapping, and automated backlog generation
- **SSSC Planner** — Supply chain security assessment against OpenSSF Scorecard, SLSA, and SBOM standards
- **RAI Planner** — Responsible AI assessment with sensitive uses screening, impact assessment, and dual-format backlog handoff

Supporting subagents included:

- **Codebase Researcher** — Searches workspace for code patterns, conventions, and implementations
- **External Researcher** — Retrieves external documentation, SDK references, and code samples
- **Phase Implementor** — Executes single implementation phases with change tracking
- **Artifact Validator** — Validates implementation work against plans and conventions
- **Prompt Tester** — Tests prompt files by following them literally in a sandbox
- **Prompt Evaluator** — Evaluates prompt execution results against quality criteria

Skills included:

- **HVE Core Installer** — Decision-driven installer skill for deploying HVE Core across workspace configurations
- **PR Reference** — Generates PR reference XML files with commit history and diffs for pull request workflows
- **Video to GIF** — Converts video files to optimized GIF animations using FFmpeg two-pass palette optimization

## Install

```bash
copilot plugin install hve-core-all@hve-core
```

## Agents

| Agent                        | Description                                                                                                                                                                                                                                                                                                                  |
|------------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| ado-backlog-manager          | Orchestrator agent for Azure DevOps backlog management workflows including triage, discovery, sprint planning, PRD-to-work-item conversion, and execution - Brought to you by microsoft/hve-core                                                                                                                             |
| ado-prd-to-wit               | Product Manager expert for analyzing PRDs and planning Azure DevOps work item hierarchies                                                                                                                                                                                                                                    |
| functional-code-review       | Pre-PR branch diff reviewer for functional correctness, error handling, edge cases, and testing gaps - Brought to you by microsoft/hve-core                                                                                                                                                                                  |
| gen-data-spec                | Generate comprehensive data dictionaries, machine-readable data profiles, and objective summaries for downstream analysis (EDA notebooks, dashboards) through guided discovery                                                                                                                                               |
| gen-jupyter-notebook         | Create structured exploratory data analysis Jupyter notebooks from available data sources and generated data dictionaries                                                                                                                                                                                                    |
| gen-streamlit-dashboard      | Develop a multi-page Streamlit dashboard                                                                                                                                                                                                                                                                                     |
| test-streamlit-dashboard     | Automated testing for Streamlit dashboards using Playwright with issue tracking and reporting                                                                                                                                                                                                                                |
| dt-coach                     | Design Thinking coach guiding teams through the 9-method HVE framework with Think/Speak/Empower philosophy - Brought to you by microsoft/hve-core                                                                                                                                                                            |
| dt-learning-tutor            | Design Thinking learning tutor providing structured curriculum, comprehension checks, and adaptive pacing - Brought to you by microsoft/hve-core                                                                                                                                                                             |
| experiment-designer          | Conversational coach that guides users through designing a Minimum Viable Experiment (MVE) with structured hypothesis formation, vetting, and experiment planning - Brought to you by microsoft/hve-core                                                                                                                     |
| pptx                         | Creates, updates, and manages PowerPoint slide decks using YAML-driven content with python-pptx                                                                                                                                                                                                                              |
| pptx-subagent                | Executes PowerPoint skill operations including content extraction, YAML creation, deck building, and visual validation                                                                                                                                                                                                       |
| github-backlog-manager       | Orchestrator agent for GitHub backlog management workflows including triage, discovery, sprint planning, and execution - Brought to you by microsoft/hve-core                                                                                                                                                                |
| doc-ops                      | Autonomous documentation operations agent for pattern compliance, accuracy verification, and gap detection - Brought to you by microsoft/hve-core                                                                                                                                                                            |
| memory                       | Conversation memory persistence for session continuity - Brought to you by microsoft/hve-core                                                                                                                                                                                                                                |
| pr-review                    | Comprehensive Pull Request review assistant ensuring code quality, security, and convention compliance - Brought to you by microsoft/hve-core                                                                                                                                                                                |
| prompt-builder               | Prompt engineering assistant with phase-based workflow for creating and validating prompts, agents, and instructions files - Brought to you by microsoft/hve-core                                                                                                                                                            |
| rpi-agent                    | Autonomous RPI orchestrator running Research → Plan → Implement → Review → Discover phases, using specialized subagents when task difficulty warrants them - Brought to you by microsoft/hve-core                                                                                                                            |
| implementation-validator     | Validates implementation quality against architectural requirements, design principles, and code standards with severity-graded findings - Brought to you by microsoft/hve-core                                                                                                                                              |
| phase-implementor            | Executes a single implementation phase from a plan with full codebase access and change tracking - Brought to you by microsoft/hve-core                                                                                                                                                                                      |
| plan-validator               | Validates implementation plans against research documents, updating the Planning Log Discrepancy Log section with severity-graded findings - Brought to you by microsoft/hve-core                                                                                                                                            |
| prompt-evaluator             | Evaluates prompt execution results against Prompt Quality Criteria with severity-graded findings and categorized remediation guidance                                                                                                                                                                                        |
| prompt-tester                | Tests prompt files by following them literally in a sandbox environment when creating or improving prompts, instructions, agents, or skills without improving or interpreting beyond face value                                                                                                                              |
| prompt-updater               | Modifies or creates prompts, instructions or rules, agents, skills following prompt engineering conventions and standards based on prompt evaluation and research                                                                                                                                                            |
| researcher-subagent          | Research subagent using search tools, read tools, fetch web page, github repo, and mcp tools                                                                                                                                                                                                                                 |
| rpi-validator                | Validates a Changes Log against the Implementation Plan, Planning Log, and Research Documents for a specific plan phase - Brought to you by microsoft/hve-core                                                                                                                                                               |
| task-implementor             | Executes implementation plans from .copilot-tracking/plans with progressive tracking and change records - Brought to you by microsoft/hve-core                                                                                                                                                                               |
| task-planner                 | Implementation planner for creating actionable implementation plans - Brought to you by microsoft/hve-core                                                                                                                                                                                                                   |
| task-researcher              | Task research specialist for comprehensive project analysis - Brought to you by microsoft/hve-core                                                                                                                                                                                                                           |
| task-reviewer                | Reviews completed implementation work for accuracy, completeness, and convention compliance - Brought to you by microsoft/hve-core                                                                                                                                                                                           |
| adr-creation                 | Interactive AI coaching for collaborative architectural decision record creation with guided discovery, research integration, and progressive documentation building - Brought to you by microsoft/edge-ai                                                                                                                   |
| agile-coach                  | Conversational agent that helps create or refine goal-oriented user stories with clear acceptance criteria for any tracking tool - Brought to you by microsoft/hve-core                                                                                                                                                      |
| arch-diagram-builder         | Architecture diagram builder agent that builds high quality ASCII-art diagrams - Brought to you by microsoft/hve-core                                                                                                                                                                                                        |
| brd-builder                  | Business Requirements Document builder with guided Q&A and reference integration                                                                                                                                                                                                                                             |
| meeting-analyst              | Meeting transcript analyzer that extracts product requirements for PRD creation via work-iq-mcp - Brought to you by microsoft/hve-core                                                                                                                                                                                       |
| prd-builder                  | Product Requirements Document builder with guided Q&A and reference integration                                                                                                                                                                                                                                              |
| product-manager-advisor      | Product management advisor for requirements discovery, validation, and issue creation                                                                                                                                                                                                                                        |
| system-architecture-reviewer | System architecture reviewer for design trade-offs, ADR creation, and well-architected alignment - Brought to you by microsoft/hve-core                                                                                                                                                                                      |
| ux-ui-designer               | UX research specialist for Jobs-to-be-Done analysis, user journey mapping, and accessibility requirements                                                                                                                                                                                                                    |
| rai-planner                  | Responsible AI assessment agent with 6-phase conversational workflow. Evaluates AI systems against Microsoft RAI Standard v2 and NIST AI RMF 1.0. Produces sensitive uses screening, RAI security model, impact assessment, control surface catalog, and dual-format backlog handoff. - Brought to you by microsoft/hve-core |
| security-planner             | Phase-based security planner that produces security models, standards mappings, and backlog handoff artifacts with AI/ML component detection and RAI Planner integration                                                                                                                                                     |
| security-reviewer            | OWASP assessment orchestrator for codebase profiling and vulnerability reporting - Brought to you by microsoft/hve-core                                                                                                                                                                                                      |
| sssc-planner                 | Guides users through a six-phase assessment of their repository's supply chain security posture against OpenSSF Scorecard, SLSA, Sigstore, and SBOM standards, producing a prioritized backlog referencing reusable workflows from hve-core and microsoft/physical-ai-toolchain.                                             |
| codebase-profiler            | Scans the repository to build a technology profile and identify which OWASP skills apply to the codebase - Brought to you by microsoft/hve-core                                                                                                                                                                              |
| finding-deep-verifier        | Deep adversarial verification of FAIL and PARTIAL findings for a single OWASP skill - Brought to you by microsoft/hve-core                                                                                                                                                                                                   |
| report-generator             | Collates verified OWASP skill assessment findings and generates a comprehensive vulnerability report written to .copilot-tracking/security/ - Brought to you by microsoft/hve-core                                                                                                                                           |
| skill-assessor               | Assesses a single OWASP skill against the codebase, reading vulnerability references and returning structured findings - Brought to you by microsoft/hve-core                                                                                                                                                                |

## Commands

| Command                                     | Description                                                                                                                                      |
|---------------------------------------------|--------------------------------------------------------------------------------------------------------------------------------------------------|
| ado-add-work-item                           | Create a single Azure DevOps work item with conversational field collection and parent validation                                                |
| ado-create-pull-request                     | Generate pull request description, discover related work items, identify reviewers, and create Azure DevOps pull request with all linkages.      |
| ado-discover-work-items                     | Discover Azure DevOps work items through user-centric queries, artifact-driven analysis, or search-based exploration                             |
| ado-get-build-info                          | Retrieve Azure DevOps build information for a Pull Request or specific Build Number.                                                             |
| ado-get-my-work-items                       | Retrieve user's current Azure DevOps work items and organize them into planning file definitions                                                 |
| ado-process-my-work-items-for-task-planning | Process retrieved work items for task planning and generate task-planning-logs.md handoff file                                                   |
| ado-sprint-plan                             | Plan an Azure DevOps sprint by analyzing iteration coverage, capacity, dependencies, and backlog gaps                                            |
| ado-triage-work-items                       | Triage untriaged Azure DevOps work items with field classification, iteration assignment, and duplicate detection                                |
| ado-update-wit-items                        | Prompt to update work items based on planning files                                                                                              |
| functional-code-review                      | Pre-PR branch diff review for functional correctness, error handling, edge cases, and testing gaps - Brought to you by microsoft/hve-core        |
| dt-handoff-implementation-space             | Compiles DT Methods 7-9 outputs into an RPI-ready handoff artifact targeting Task Researcher                                                     |
| dt-handoff-problem-space                    | Problem Space exit handoff — compiles DT Methods 1-3 outputs into an RPI-ready artifact targeting Task Researcher                                |
| dt-handoff-solution-space                   | Solution Space exit handoff — compiles DT Methods 4-6 outputs into an RPI-ready artifact targeting Task Researcher                               |
| dt-method-04-convergence                    | Theme discovery for Design Thinking Method 4c through philosophy-based clustering - Brought to you by microsoft/hve-core                         |
| dt-method-04-ideation                       | Divergent ideation for Design Thinking Method 4b with constraint-informed solution generation - Brought to you by microsoft/hve-core             |
| dt-method-05-concepts                       | Concept articulation for Design Thinking Method 5b from brainstorming themes - Brought to you by microsoft/hve-core                              |
| dt-method-05-evaluation                     | Stakeholder alignment and three-lens evaluation for Design Thinking Method 5c - Brought to you by microsoft/hve-core                             |
| dt-method-06-building                       | Scrappy prototype building with fidelity enforcement for Design Thinking Method 6b - Brought to you by microsoft/hve-core                        |
| dt-method-06-planning                       | Concept analysis and prototype approach design for Design Thinking Method 6a - Brought to you by microsoft/hve-core                              |
| dt-method-06-testing                        | Hypothesis-driven testing and constraint validation for Design Thinking Method 6c - Brought to you by microsoft/hve-core                         |
| dt-method-next                              | Assess DT project state and recommend next method with sequencing validation - Brought to you by microsoft/hve-core                              |
| dt-resume-coaching                          | Resume a Design Thinking coaching session — reads coaching state and re-establishes context - Brought to you by microsoft/hve-core               |
| dt-start-project                            | Start a new Design Thinking coaching project with state initialization and first coaching interaction - Brought to you by microsoft/hve-core     |
| github-add-issue                            | Create a GitHub issue using discovered repository templates and conversational field collection                                                  |
| github-discover-issues                      | Discover GitHub issues through user-centric queries, artifact-driven analysis, or search-based exploration and produce planning files for review |
| github-execute-backlog                      | Execute a GitHub backlog plan by creating, updating, linking, closing, and commenting on issues from a handoff file                              |
| github-sprint-plan                          | Plan a GitHub milestone sprint by analyzing issue coverage, identifying gaps, and organizing work into a prioritized sprint backlog              |
| github-suggest                              | Resume GitHub backlog management workflow after session restore - Brought to you by microsoft/hve-core                                           |
| github-triage-issues                        | Triage GitHub issues not yet triaged with automated label suggestions, milestone assignment, and duplicate detection                             |
| checkpoint                                  | Save or restore conversation context using memory files - Brought to you by microsoft/hve-core                                                   |
| doc-ops-update                              | Invoke doc-ops agent for documentation quality assurance and updates                                                                             |
| git-commit-message                          | Generates a commit message following the commit-message.instructions.md rules based on all changes in the branch                                 |
| git-commit                                  | Stages all changes, generates a conventional commit message, shows it to the user, and commits using only git add/commit                         |
| git-merge                                   | Coordinate Git merge, rebase, and rebase --onto workflows with consistent conflict handling.                                                     |
| git-setup                                   | Interactive, verification-first Git configuration assistant (non-destructive)                                                                    |
| prompt-analyze                              | Evaluates prompt engineering artifacts against quality criteria and reports findings - Brought to you by microsoft/hve-core                      |
| prompt-build                                | Build or improve prompt engineering artifacts following quality criteria - Brought to you by microsoft/hve-core                                  |
| prompt-refactor                             | Refactors and cleans up prompt engineering artifacts through iterative improvement - Brought to you by microsoft/hve-core                        |
| pull-request                                | Generates pull request descriptions from branch diffs - Brought to you by microsoft/hve-core                                                     |
| rpi                                         | Autonomous Research-Plan-Implement-Review-Discover workflow for completing tasks - Brought to you by microsoft/hve-core                          |
| task-implement                              | Locates and executes implementation plans using Task Implementor - Brought to you by microsoft/hve-core                                          |
| task-plan                                   | Initiates implementation planning based on user context or research documents - Brought to you by microsoft/hve-core                             |
| task-research                               | Initiates research for implementation planning based on user requirements - Brought to you by microsoft/hve-core                                 |
| task-review                                 | Initiates implementation review based on user context or automatic artifact discovery - Brought to you by microsoft/hve-core                     |
| rai-capture                                 | Initiate a responsible AI assessment from existing knowledge using the RAI Planner agent in capture mode                                         |
| rai-plan-from-prd                           | Initiate a responsible AI assessment from PRD/BRD artifacts using the RAI Planner agent in from-prd mode                                         |
| rai-plan-from-security-plan                 | Initiate a responsible AI assessment from a completed Security Plan using the RAI Planner agent in from-security-plan mode (recommended)         |
| incident-response                           | Incident response workflow for Azure operations scenarios - Brought to you by microsoft/hve-core                                                 |
| risk-register                               | Creates a concise and well-structured qualitative risk register using a Probability × Impact (P×I) risk matrix.                                  |
| security-capture                            | Initiate security planning from existing notes or knowledge using the Security Planner agent in capture mode                                     |
| security-plan-from-prd                      | Initiate security planning from PRD/BRD artifacts using the Security Planner agent in from-prd mode                                              |
| security-review-llm                         | Runs OWASP LLM and Agentic vulnerability assessments with codebase profiling for context - Brought to you by microsoft/hve-core                  |
| security-review-web                         | Runs an OWASP Top 10 web vulnerability assessment without codebase profiling - Brought to you by microsoft/hve-core                              |
| security-review                             | Runs an OWASP vulnerability assessment against the current codebase - Brought to you by microsoft/hve-core                                       |
| sssc-capture                                | Start a new SSSC assessment via guided conversation using the SSSC Planner agent in capture mode                                                 |
| sssc-from-brd                               | Start an SSSC assessment from existing BRD artifacts using the SSSC Planner agent                                                                |
| sssc-from-prd                               | Start an SSSC assessment from existing PRD artifacts using the SSSC Planner agent                                                                |
| sssc-from-security-plan                     | Extend a Security Planner assessment with supply chain coverage using the SSSC Planner agent                                                     |

## Instructions

| Instruction                          | Description                                                                                                                                                                                                                                                 |
|--------------------------------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| ado-backlog-sprint                   | Sprint planning workflow for Azure DevOps iterations with coverage analysis, capacity tracking, and gap detection - Brought to you by microsoft/hve-core                                                                                                    |
| ado-backlog-triage                   | Triage workflow for Azure DevOps work items with field classification, iteration assignment, and duplicate detection - Brought to you by microsoft/hve-core                                                                                                 |
| ado-create-pull-request              | Required protocol for creating Azure DevOps pull requests with work item discovery, reviewer identification, and automated linking.                                                                                                                         |
| ado-get-build-info                   | Required instructions for anything related to Azure Devops or ado build information including status, logs, or details from provided pullrequest (PR), build Id, or branch name.                                                                            |
| ado-interaction-templates            | Work item description and comment templates for consistent Azure DevOps content formatting - Brought to you by microsoft/hve-core                                                                                                                           |
| ado-update-wit-items                 | Work item creation and update protocol using MCP ADO tools with handoff tracking                                                                                                                                                                            |
| ado-wit-discovery                    | Protocol for discovering Azure DevOps work items via user assignment or artifact analysis with planning file output                                                                                                                                         |
| ado-wit-planning                     | Reference specification for Azure DevOps work item planning files, templates, field definitions, and search protocols                                                                                                                                       |
| bash                                 | Instructions for bash script implementation - Brought to you by microsoft/hve-core                                                                                                                                                                          |
| bicep                                | Instructions for Bicep infrastructure as code implementation - Brought to you by microsoft/hve-core                                                                                                                                                         |
| csharp-tests                         | Required instructions for C# (CSharp) test code research, planning, implementation, editing, or creating - Brought to you by microsoft/hve-core                                                                                                             |
| csharp                               | Required instructions for C# (CSharp) research, planning, implementation, editing, or creating - Brought to you by microsoft/hve-core                                                                                                                       |
| pester                               | Instructions for Pester testing conventions - Brought to you by microsoft/hve-core                                                                                                                                                                          |
| powershell                           | Instructions for PowerShell scripting implementation - Brought to you by microsoft/hve-core                                                                                                                                                                 |
| python-script                        | Instructions for Python scripting implementation - Brought to you by microsoft/hve-core                                                                                                                                                                     |
| rust-tests                           | Required instructions for Rust test code research, planning, implementation, editing, or creating - Brought to you by microsoft/hve-core                                                                                                                    |
| rust                                 | Required instructions for Rust research, planning, implementation, editing, or creating - Brought to you by microsoft/hve-core                                                                                                                              |
| terraform                            | Instructions for Terraform infrastructure as code implementation - Brought to you by microsoft/hve-core                                                                                                                                                     |
| uv-projects                          | Create and manage Python virtual environments using uv commands                                                                                                                                                                                             |
| dt-coaching-identity                 | Required instructions when working with or doing any Design Thinking (DT); Contains instructions for the Design Thinking coach identity, philosophy, and user interaction and communication requirements for consistent coaching behavior.                  |
| dt-coaching-state                    | Coaching state schema for Design Thinking session persistence, method progress tracking, and session recovery                                                                                                                                               |
| dt-curriculum-01-scoping             | DT Curriculum Module 1: Scope Conversations — concepts, techniques, checks, and exercises                                                                                                                                                                   |
| dt-curriculum-02-research            | DT Curriculum Module 2: Design Research — concepts, techniques, checks, and exercises                                                                                                                                                                       |
| dt-curriculum-03-synthesis           | DT Curriculum Module 3: Synthesis — concepts, techniques, checks, and exercises                                                                                                                                                                             |
| dt-curriculum-04-brainstorming       | DT Curriculum Module 4: Brainstorming — concepts, techniques, checks, and exercises                                                                                                                                                                         |
| dt-curriculum-05-concepts            | DT Curriculum Module 5: User Concepts — concepts, techniques, checks, and exercises                                                                                                                                                                         |
| dt-curriculum-06-prototypes          | DT Curriculum Module 6: Low-Fidelity Prototypes — concepts, techniques, checks, and exercises                                                                                                                                                               |
| dt-curriculum-07-testing             | DT Curriculum Module 7: High-Fidelity Prototypes — concepts, techniques, checks, and exercises                                                                                                                                                              |
| dt-curriculum-08-iteration           | DT Curriculum Module 8: User Testing — concepts, techniques, checks, and exercises                                                                                                                                                                          |
| dt-curriculum-09-handoff             | DT Curriculum Module 9: Iteration at Scale — concepts, techniques, checks, and exercises                                                                                                                                                                    |
| dt-curriculum-scenario-manufacturing | Manufacturing reference scenario for DT learning — factory floor improvement project used across all 9 curriculum modules                                                                                                                                   |
| dt-image-prompt-generation           | M365 Copilot image prompt generation techniques for Design Thinking Method 5 concept visualization with lo-fi enforcement                                                                                                                                   |
| dt-industry-energy                   | Energy industry context for DT coaching — vocabulary, constraints, empathy tools, and reference scenarios                                                                                                                                                   |
| dt-industry-healthcare               | Healthcare industry context for DT coaching — vocabulary, constraints, empathy tools, and reference scenarios                                                                                                                                               |
| dt-industry-manufacturing            | Manufacturing industry context for DT coaching — vocabulary, constraints, empathy tools, and reference scenarios                                                                                                                                            |
| dt-method-01-deep                    | Deep expertise for Method 1: Scope Conversations, covering advanced stakeholder analysis, power dynamics, and scope negotiation                                                                                                                             |
| dt-method-01-scope                   | Method 1 Scope Conversations coaching knowledge for Design Thinking: frozen vs fluid assessment, stakeholder discovery, constraint patterns, and conversation navigation                                                                                    |
| dt-method-02-deep                    | Deep expertise for Method 2: Design Research, covering advanced interview techniques, ethnographic observation, and evidence triangulation                                                                                                                  |
| dt-method-02-research                | Method 2 Design Research coaching knowledge: interview techniques, research planning, environmental observation, and insight extraction patterns                                                                                                            |
| dt-method-03-deep                    | Deep expertise for Method 3: Input Synthesis — advanced affinity analysis, insight frameworks, and problem statement articulation                                                                                                                           |
| dt-method-03-synthesis               | Method 3 Input Synthesis coaching knowledge: pattern recognition, theme development, synthesis validation, and Problem-to-Solution Space transition readiness                                                                                               |
| dt-method-04-brainstorming           | Design Thinking Method 4: AI-assisted brainstorming with divergent ideation and convergent clustering for solution space entry                                                                                                                              |
| dt-method-04-deep                    | Deep expertise for Method 4: Brainstorming — advanced facilitation techniques, creative block recovery, and convergence frameworks                                                                                                                          |
| dt-method-05-concepts                | Design Thinking Method 5: User Concepts coaching with concept articulation, three-lens evaluation, and stakeholder alignment for Solution Space development                                                                                                 |
| dt-method-05-deep                    | Deep expertise for Method 5: User Concepts, covering advanced D/F/V analysis, image prompt crafting, concept stress-testing, and portfolio management                                                                                                       |
| dt-method-06-deep                    | Deep expertise for Method 6: Low-Fidelity Prototypes; advanced paper prototyping, service blueprinting, and experience prototyping                                                                                                                          |
| dt-method-06-lofi-prototypes         | Design Thinking Method 6: Lo-fi prototyping techniques, scrappy enforcement, feedback planning, and constraint discovery for Solution Space exit                                                                                                            |
| dt-method-07-deep                    | Deep expertise for Method 7: High-Fidelity Prototypes; fidelity translation, architecture, and specification writing                                                                                                                                        |
| dt-method-07-hifi-prototypes         | Design Thinking Method 7: High-Fidelity Prototypes; technical translation, functional prototypes, and specifications                                                                                                                                        |
| dt-method-08-deep                    | Deep expertise for Method 8: Test and Validate — advanced test design, small-sample analysis, iteration triggers, and bias mitigation                                                                                                                       |
| dt-method-08-testing                 | Design Thinking Method 8: User Testing - evidence-based evaluation, test protocols, and non-linear iteration support                                                                                                                                        |
| dt-method-09-deep                    | Deep expertise for Method 9: Iteration at Scale — change management, scaling, and adoption measurement                                                                                                                                                      |
| dt-method-09-iteration               | Design Thinking Method 9: Iteration at Scale — systematic refinement, scaling patterns, and organizational deployment                                                                                                                                       |
| dt-method-sequencing                 | Method transition rules, nine-method sequence, space boundaries, and non-linear iteration support for Design Thinking coaching                                                                                                                              |
| dt-quality-constraints               | Quality constraints, fidelity rules, and output standards for Design Thinking coaching across all nine methods                                                                                                                                              |
| dt-rpi-handoff-contract              | DT-to-RPI handoff contract defining exit points, artifact schemas, and per-agent input requirements for lateral transitions from Design Thinking to RPI workflow                                                                                            |
| dt-rpi-implement-context             | DT-aware Task Implementor context: fidelity constraints, stakeholder validation, and iteration support                                                                                                                                                      |
| dt-rpi-planning-context              | DT-aware Task Planner context: fidelity constraints, iteration support, and confidence-informed planning for DT artifacts                                                                                                                                   |
| dt-rpi-research-context              | DT-aware Task Researcher context: frames research around DT methods, stakeholder needs, and empathy-driven inquiry                                                                                                                                          |
| dt-rpi-review-context                | DT-aware Task Reviewer context: quality criteria for Design Thinking artifacts                                                                                                                                                                              |
| dt-subagent-handoff                  | DT subagent handoff workflow: readiness assessment, artifact compilation, and handoff validation via subagent dispatch                                                                                                                                      |
| experiment-designer                  | MVE domain knowledge and coaching conventions for the Experiment Designer agent - Brought to you by microsoft/hve-core                                                                                                                                      |
| pptx                                 | Shared conventions for PowerPoint Builder agent, subagent, and powerpoint skill                                                                                                                                                                             |
| community-interaction                | Community interaction voice, tone, and response templates for GitHub-facing agents and prompts                                                                                                                                                              |
| github-backlog-discovery             | Discovery protocol for GitHub backlog management - artifact-driven, user-centric, and search-based issue discovery                                                                                                                                          |
| github-backlog-planning              | Reference specification for GitHub backlog management tooling - planning files, search protocols, similarity assessment, and state persistence                                                                                                              |
| github-backlog-triage                | Triage workflow for GitHub issue backlog management - automated label suggestion, milestone assignment, and duplicate detection                                                                                                                             |
| github-backlog-update                | Execution workflow for GitHub issue backlog management - consumes planning handoffs and executes issue operations                                                                                                                                           |
| commit-message                       | Required instructions for creating all commit messages - Brought to you by microsoft/hve-core                                                                                                                                                               |
| git-merge                            | Required protocol for Git merge, rebase, and rebase --onto workflows with conflict handling and stop controls.                                                                                                                                              |
| markdown                             | Required instructions for creating or editing any Markdown (.md) files                                                                                                                                                                                      |
| prompt-builder                       | Authoring standards for prompt engineering artifacts including prompts, agents, instructions, and skills                                                                                                                                                    |
| pull-request                         | Required instructions for pull request description generation and optional PR creation using diff analysis, subagent review, and MCP tools - Brought to you by microsoft/hve-core                                                                           |
| writing-style                        | Required writing style conventions for voice, tone, and language in all markdown content                                                                                                                                                                    |
| rai-backlog-handoff                  | RAI review and backlog handoff for Phase 6: review rubric, RAI scorecard, dual-format backlog generation                                                                                                                                                    |
| rai-capture-coaching                 | Exploration-first questioning techniques for RAI capture mode adapted from Design Thinking research methods - Brought to you by microsoft/hve-core                                                                                                          |
| rai-identity                         | RAI Planner identity, 6-phase orchestration, state management, and session recovery - Brought to you by microsoft/hve-core                                                                                                                                  |
| rai-impact-assessment                | RAI impact assessment for Phase 5: control surface taxonomy, evidence register, tradeoff documentation, and work item generation                                                                                                                            |
| rai-security-model                   | RAI security model analysis for Phase 4: AI STRIDE extensions, dual threat IDs, ML STRIDE matrix, and security model merge protocol                                                                                                                         |
| rai-sensitive-uses                   | Sensitive Uses assessment for Phase 2: screening categories, restricted uses gate, and depth tier assignment                                                                                                                                                |
| rai-standards                        | Embedded RAI standards for Phase 3: Microsoft RAI Standard v2 principles and NIST AI RMF subcategory mappings                                                                                                                                               |
| backlog-handoff                      | Dual-format backlog handoff for ADO and GitHub with content sanitization, autonomy tiers, and work item templates - Brought to you by microsoft/hve-core                                                                                                    |
| identity                             | Security Planner identity, six-phase orchestration, state management, and session recovery protocols - Brought to you by microsoft/hve-core                                                                                                                 |
| operational-buckets                  | Operational bucket definitions with component classification guidance and cross-cutting security concerns - Brought to you by microsoft/hve-core                                                                                                            |
| security-model                       | STRIDE-based security model analysis per operational bucket with threat table format and data flow analysis - Brought to you by microsoft/hve-core                                                                                                          |
| sssc-assessment                      | Phase 2 supply chain assessment protocol with the 27 combined capabilities inventory for SSSC Planner.                                                                                                                                                      |
| sssc-backlog                         | Phase 5 dual-format work item generation with templates and priority derivation for SSSC Planner.                                                                                                                                                           |
| sssc-gap-analysis                    | Phase 4 gap comparison, adoption categorization, and effort sizing for SSSC Planner.                                                                                                                                                                        |
| sssc-handoff                         | Phase 6 backlog handoff protocol with Scorecard projections and dual-format output for SSSC Planner.                                                                                                                                                        |
| sssc-identity                        | Identity and orchestration instructions for the SSSC Planner agent. Contains six-phase workflow, state.json schema, session recovery, and question cadence.                                                                                                 |
| sssc-standards                       | Phase 3 OpenSSF Scorecard, SLSA, Best Practices Badge, Sigstore, and SBOM standards mapping for SSSC Planner.                                                                                                                                               |
| standards-mapping                    | Embedded OWASP, NIST, and CIS security standards with researcher subagent delegation for WAF/CAF runtime lookups - Brought to you by microsoft/hve-core                                                                                                     |
| hve-core-location                    | Important: hve-core is the repository containing this instruction file; Guidance: if a referenced prompt, instructions, agent, or script is missing in the current directory, fall back to this hve-core location by walking up this file's directory tree. |
| story-quality                        | Shared story quality conventions for work item creation and evaluation across agents and workflows                                                                                                                                                          |

## Skills

| Skill                     | Description                                                                                                                                                                                                                                                                                                                                                                                                         |
|---------------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| powerpoint                | PowerPoint slide deck generation and management using python-pptx with YAML-driven content and styling - Brought to you by microsoft/hve-core                                                                                                                                                                                                                                                                       |
| video-to-gif              | Video-to-GIF conversion skill with FFmpeg two-pass optimization - Brought to you by microsoft/hve-core                                                                                                                                                                                                                                                                                                              |
| vscode-playwright         | VS Code screenshot capture using Playwright MCP with serve-web for slide decks and documentation - Brought to you by microsoft/hve-core                                                                                                                                                                                                                                                                             |
| hve-core-installer        | Decision-driven installer for HVE-Core with 6 clone-based installation methods, extension quick-install, environment detection, and agent customization workflows - Brought to you by microsoft/hve-core                                                                                                                                                                                                            |
| owasp-agentic             | OWASP Agentic Security Top 10 vulnerability knowledge base for identifying, assessing, and remediating security risks in AI agent systems - Brought to you by microsoft/hve-core.                                                                                                                                                                                                                                   |
| owasp-llm                 | OWASP Top 10 for LLM Applications (2025) vulnerability knowledge base for identifying, assessing, and remediating security risks in large language model systems - Brought to you by microsoft/hve-core.                                                                                                                                                                                                            |
| owasp-top-10              | OWASP Top 10 for Web Applications (2025) vulnerability knowledge base for identifying, assessing, and remediating security risks in web application environments - Brought to you by microsoft/hve-core.                                                                                                                                                                                                            |
| security-reviewer-formats | Format specifications and data contracts for the security reviewer orchestrator and its subagents - Brought to you by microsoft/hve-core.                                                                                                                                                                                                                                                                           |
| pr-reference              | Generates PR reference XML containing commit history and unified diffs between branches with extension and path filtering. Includes utilities to list changed files by type and read diff chunks. Use when creating pull request descriptions, preparing code reviews, analyzing branch changes, discovering work items from diffs, or generating structured diff summaries. - Brought to you by microsoft/hve-core |

---

> Source: [microsoft/hve-core](https://github.com/microsoft/hve-core)

