Best skills for Copilot
GitHub Copilot lives inside your editor and, increasingly, runs agent tasks on its own. Skills are how you steer it toward a specific job instead of generic autocomplete. A skill is a reusable SKILL.md instruction set; with Copilot you apply it through custom instructions or an extension, so the model follows the same vetted approach every time — reviewing a pull request, scaffolding tests, writing docs or automating a repetitive change.
This page ranks the best Copilot skills available right now. The list is recomputed continuously from three signals — an automated content-quality score, GitHub star count, and a security review that demotes skills requesting risky permissions — so the safest, best-documented skills surface first. Stars alone do not decide the order: a popular skill with a weak or risky SKILL.md sits below a smaller but well-documented, verified one.
The strongest picks are development-focused — code review, refactoring and test generation — with productivity, DevOps, documentation and security skills rounding out the list. Each skill page below spells out what the skill does, its difficulty level, and how to wire it into Copilot.
Most of these skills are portable: the same SKILL.md usually runs on Claude Code, Cursor or Windsurf once you drop it in that tool's skills folder — check the platform badges on each card. Treat this list as a snapshot, not a verdict: our pipeline keeps adding and re-scoring skills, and rankings move from week to week. Save the page and check in now and then.
24 skills ranked
React Hook Form Best Practices
Development
Master React Hook Form: avoid anti-patterns, manage subscriptions, and handle reset, dirty state, and controlled inputs correctly.
Firecrawl Build Search
Development
Integrate Firecrawl /search into product code and agent workflows for web discovery before extraction. Use when features start with a query instead of a URL.
Set up pre-commit hooks with Husky, lint-staged, Prettier
Development
Set up Husky, lint-staged, and Prettier to add a pre-commit hook that formats files, type-checks, and runs tests.
Playwright E2E Testing Patterns
Testing
Playwright E2E testing patterns covering Page Object Model, configuration, CI/CD integration, artifact management, and flaky test strategies.
Home Assistant Integration Knowledge
Development
Complete reference for building, testing and reviewing Home Assistant integrations, covering best practices, entity platforms, and quality scale rules.
Grafana Panel & Viz Testing Strategy
Testing
Write unit and E2E tests for Grafana visualization panels and viz utilities following repo conventions. Covers builders, canvas draw-call snapshots, and anti-flake rules.
Database Migration
Development
Master database schema and data migrations across ORMs (Sequelize, TypeORM, Prisma), including rollback strategies and zero-downtime deployments.
Algorithms and Data Structures Education
Development
Skills for building clear, well-documented, and tested educational algorithm implementations in Java.
Latency-Critical Systems
Development
Guidance for designing and optimizing latency-critical systems, including metric tracking, hot path mapping, optimization order, verification, and guardrails.
Chakra UI Builder
Development
Build accessible, responsive UI components and layouts with Chakra UI v3, set up Chakra in projects, and design scalable themes with tokens and recipes.
Create Admin Routing
Development
Create the Symfony routing YAML file declaring all admin routes for a domain.
Dart/Flutter Patterns
Development
Production-ready Dart and Flutter patterns covering null safety, state management (BLoC, Riverpod, Provider), navigation, networking, and clean architecture for writing or reviewing code.
Find Ready-to-Merge PRs
Development
Finds open Home Assistant pull requests that are ready to merge immediately, checking CI, merge-gate, approvals, conflicts, and review threads.
Microservices Architecture Patterns
Development
Master microservices architecture patterns including service boundaries, inter-service communication, data management, and resilience patterns for building distributed systems.
Identify Assumptions (New Product)
Productivity
Identify risky assumptions for a new product idea across 8 risk categories including Go-to-Market, Strategy, and Team. Use when evaluating startup risks or assessing a new product concept.
Supabase Studio Error Handling
Development
Error handling pattern for Supabase Studio: classification, UI rendering, and troubleshooting with reusable components.
Creating pull requests
Development
Conventions for PR bodies: reference Linear tickets, GitHub issues, never mention client names.
Laravel Verification Loop
DevOps
Complete verification workflow for Laravel projects: environment checks, linting, static analysis, test coverage, security audit, and deployment readiness.
Threat Modeling Expert
Security
Expert in threat modeling, security architecture review, and risk assessment. Masters STRIDE, PASTA, attack trees, and security requirement extraction.
AWS CDK Reusable Patterns
DevOps
Expert guidance on building reusable AWS CDK constructs, L3 patterns, and production-grade infrastructure stacks with TypeScript, Python, or Java.
Async Python Patterns
Development
Comprehensive guidance for implementing asynchronous Python applications using asyncio, concurrent programming patterns, and async/await for high-performance, non-blocking systems.
React State Management
Development
Master modern React state management with Redux Toolkit, Zustand, Jotai, and React Query. Use when setting up global state, managing server state, or choosing between state management solutions.
Influencer Brief
Content
Create a structured brief for an influencer or creator partnership campaign: objectives, deliverables, creative guidelines, and performance metrics.
DTO Contracts
Development
Defines DTO structure, lifecycle, and transformation rules across the application.
How to choose
- How are these skills selected?
- An algorithm picks them among the published skills that match this page's criteria, such as category, tags or compatible tools. It ranks them by the quality score a language model gave them. On ranking pages, it also weighs GitHub stars and the security rating. Nobody reviews them one by one.
- What do the security ratings mean?
- A language model reads the SKILL.md file, without running it, and gives it a rating. Safe means it sees no meaningful execution risk. Caution means the skill uses powerful tools such as bash, docker or the network for a legitimate purpose. Risky means it asks for destructive actions, for secrets to be sent out, or for obfuscated code to run; a skill rated Risky is never published. The rating does not replace your own reading of the file.
- How do I install a skill?
- Open any skill page and follow its install instructions for your tool — Claude Code, Cursor or Copilot. Each skill lists the exact steps so you can get it running in a couple of minutes.