prowler/skills/README.md

AI Agent Skills

This directory contains Agent Skills following the Agent Skills open standard. Skills provide domain-specific patterns, conventions, and guardrails that help AI coding assistants (Claude Code, OpenCode, Cursor, etc.) understand project-specific requirements.

What Are Skills?

Agent Skills is an open standard format for extending AI agent capabilities with specialized knowledge. Originally developed by Anthropic and released as an open standard, it is now adopted by multiple agent products.

Skills teach AI assistants how to perform specific tasks. When an AI loads a skill, it gains context about:

• Critical rules (what to always/never do)
• Code patterns and conventions
• Project-specific workflows
• References to detailed documentation

Setup

Run the setup script to configure skills for all supported AI coding assistants:

./skills/setup.sh

This creates symlinks so each tool finds skills in its expected location:

Tool	Symlink Created
Claude Code / OpenCode	.claude/skills/
Codex (OpenAI)	.codex/skills/
GitHub Copilot	.github/skills/
Gemini CLI	.gemini/skills/

After running setup, restart your AI coding assistant to load the skills.

How to Use Skills

Skills are automatically discovered by the AI agent. To manually load a skill during a session:

Read skills/{skill-name}/SKILL.md

Available Skills

Generic Skills

Reusable patterns for common technologies:

Skill	Description
typescript	Const types, flat interfaces, utility types
react-19	React 19 patterns, React Compiler
nextjs-15	App Router, Server Actions, streaming
tailwind-4	cn() utility, Tailwind 4 patterns
playwright	Page Object Model, selectors
pytest	Fixtures, mocking, markers
django-drf	ViewSets, Serializers, Filters
zod-4	Zod 4 API patterns
zustand-5	Persist, selectors, slices
ai-sdk-5	Vercel AI SDK patterns

Prowler-Specific Skills

Patterns tailored for Prowler development:

Skill	Description
prowler	Project overview, component navigation
prowler-api	Django + RLS + JSON:API patterns
prowler-ui	Next.js + shadcn conventions
prowler-sdk-check	Create new security checks
prowler-mcp	MCP server tools and models
prowler-test-sdk	SDK testing (pytest + moto)
prowler-test-api	API testing (pytest-django + RLS)
prowler-test-ui	E2E testing (Playwright)
prowler-compliance	Compliance framework structure
prowler-provider	Add new cloud providers
prowler-pr	Pull request conventions
prowler-docs	Documentation style guide

Meta Skills

Skill	Description
skill-creator	Create new AI agent skills

Directory Structure

skills/
├── {skill-name}/
│   ├── SKILL.md              # Required - main instrunsction and metadata
│   ├── scripts/              # Optional - executable code
│   ├── assets/               # Optional - templates, schemas, resources
│   └── references/           # Optional - links to local docs
└── README.md                 # This file

Creating New Skills

Use the skill-creator skill for guidance:

Read skills/skill-creator/SKILL.md

Quick Checklist

1. Create directory: skills/{skill-name}/
2. Add SKILL.md with required frontmatter
3. Keep content concise (under 500 lines)
4. Reference existing docs instead of duplicating
5. Add to AGENTS.md skills table

Design Principles

• Concise: Only include what AI doesn't already know
• Progressive disclosure: Point to detailed docs, don't duplicate
• Critical rules first: Lead with ALWAYS/NEVER patterns
• Minimal examples: Show patterns, not tutorials

Resources

• Agent Skills Standard - Open standard specification
• Agent Skills GitHub - Example skills
• Claude Code Best Practices - Skill authoring guide
• Prowler AGENTS.md - AI agent general rules