raandree/copilot-atelier

Use this skill when a Copilot skill, prompt, or agent changes and someone needs evidence that it works rather than one lucky run. Covers three stacked questions: is it discovered (trigger-rate evals), does it hold up across runs (capability and regression sets, pass@k vs pass^k, deterministic / LLM-as-judge / human graders), and does it beat no skill at all (with/without delta on pass rate, tokens, duration). Starts from native VS Code tooling and Waza, falling back to bundled PowerShell harnesses. Rule of thumb: start from 20-50 real failures, not synthetic prompts. USE FOR: evaluating or measuring any Customization, eval harness and artifact design, grader selection, trigger-rate and discoverability work, eval-driven iteration on a description or a body. DO NOT USE FOR: authoring the skill itself (use skill-creator), MCP server eval questions (use mcp-builder Phase 4), unit-testing PowerShell code (use pester-patterns), security review of an agent (use agent-security-review).

Reviews AI agents, LLM-backed features, MCP servers, and prompt/skill/agent definitions for agentic-security risk. On-demand checklist: the lethal-trifecta test (private data × untrusted content × outbound channel), OWASP Top 10 for LLM Applications (2025) quick checks, a containment-first checklist, and MCP / tool-permission review. Breaks the trifecta rather than filtering it; treats every tool return value as untrusted. USE FOR: prompt injection, indirect prompt injection, tool output injection, lethal trifecta, agent security review, MCP security, OWASP LLM Top 10, LLM01, excessive agency, improper output handling, data exfiltration via agent, containment-first, egress allow-list, least-privilege agent, confused deputy, RAG poisoning. DO NOT USE FOR: building an MCP server (use mcp-builder), classic web/app AppSec with no LLM in the loop (use the security-reviewer agent), writing evals (use agent-evals).

Extract data from sites that require login (LinkedIn, GitHub, Sessionize, Microsoft 365, X, Meetup) using a persistent Playwright + Microsoft Edge profile. Covers profile setup, interactive sign-in capture, session-cookie re-injection (Chromium drops session-only auth cookies on shutdown), cookie-based auth detection, OAuth callback flags, and a task harness pattern. USE FOR: scrape LinkedIn, scrape GitHub, scrape Sessionize, authenticated scraping, persistent browser profile, Playwright Edge profile, msedge channel, headless authenticated extraction, session cookie persistence, OAuth callback cookie, ASP.NET ApplicationCookie, li_at, user_session, Sessionize cookie, login status check, launchPersistentContext, Edge tracking prevention, FedCm SSO, profile lock orphan msedge, CV resume data extraction from web. DO NOT USE FOR: posting or mutating user accounts, CAPTCHA-heavy targets, scraping at scale (no rate limiting), Microsoft Graph API access (use microsoft-todo-tasks), Outlook COM (use outlook-* skills).

Build and manage Hyper-V lab environments with AutomatedLab (AL): installation, lab definitions, roles (AD, File Server, Routing, PKI, SQL), networking (incl. NAT), post-deploy configuration, VM status, snapshots, file transfer, DSC, certificates, firewall, and teardown. USE FOR: AutomatedLab, Hyper-V lab, deploy/create lab, domain controller, lab VMs, ISO images, LabSources, Install-Lab, New-LabDefinition, Add-LabMachineDefinition, Remove-Lab, Get-LabVM*, Wait-LabVM, Wait-LabADReady, Restart-LabVM, Save-LabVM, Copy-LabFileItem, Get-LabInternetFile, Invoke-LabDscConfiguration, Test-LabMachineInternetConnectivity, Join-LabVMDomain, Enable/Disable-LabVMFirewallGroup, Add-LabVMUserRight, Request-LabCertificate, Mount-LabIsoImage, Connect-Lab, Enable-LabInternalRouting, Add-LabVirtualNetworkDefinition -UseNat, NetNat, HyperVUseNAT, CredSSP double-hop, Enable-LabHostRemoting. DO NOT USE FOR: AutomatedLab on Proxmox/QEMU (use automatedlab-proxmox), Azure VM deployment, production infrastructure.

Diagnoses AutomatedLab Windows provisioning and remoting failures on Proxmox/QEMU from API, guest-agent, Windows Setup, and WinRM evidence. Separates deploy-time AppX cleanup from unusable generalized templates. USE FOR: AutomatedLab Proxmox, Install-Lab Proxmox hang, Windows could not start the installation process, IMAGE_STATE_UNDEPLOYABLE, IMAGE_STATE_COMPLETE, pre-sysprepped template, generalized template, specialized golden image, BiExportStoreAlterationsToEfi, c000000d, qm template, Sysprep AppX 0x80073cf2, guest-exec-status, qmpstatus, New-LabPSSession port is closed, NetworkAdapterBindingCorrected, stale AutomatedLabCore/AutomatedLabWorker. DO NOT USE FOR: Hyper-V lab deployment (use automatedlab-deployment), generic WinRM diagnosis (use winrm-troubleshooting), generic job monitoring (use long-running-job-monitor).

Designs a project's visual identity, renders SVG masters and PNG deliverables, exports the eleven-slot set a shared logo library expects, and wires the chosen variants into the project itself. Covers palette extraction, lockups, glyph marks, app icons, monochrome variants, and measured verification. USE FOR: create a logo or icon for a repository, design a brand mark or glyph, generate an app icon or favicon, build a brand board, produce light, dark and monochrome variants, render SVG to PNG at exact sizes, add a project to a shared Logos folder, regenerate assets after the mark changes, put the mark in a README header or fix one that wastes space, give a package its icon so a gallery entry stops showing a placeholder, set a repository social preview. DO NOT USE FOR: photo editing, marketing copy, architecture diagrams (use Mermaid), slide decks (use marp-slide-overflow), screenshots (use windows-gui-screenshot-capture), logos inside generated reports (use pswritehtml-reporting).

Runs an opt-in, bounded validation pass over the files one work batch changed. Collects project-scoped paths manually, deduplicates them per session, and checks each supported file once: PowerShell parsing and PSScriptAnalyzer in an owned, time-bounded worker process, and markdown through a real markdownlint plus a partial four-rule native structure check. A receipt names the plan identity, each validator with its version and config, and the SHA-256 of the exact bytes read, so changed content, a changed plan, or a tampered receipt cannot inherit a pass. Missing tools, oversized input, and timeouts stay unavailable and unverified. USE FOR: validate the files changed in this batch, collect changed paths for a later check, read or revalidate a receipt, see what is still unverified. DO NOT USE FOR: replacing immediate tests or the full build gate, formatting files, whole-project linting after every edit, deployment health checks, debugging a failing build (use sampler-build-debug).

Verify every external claim, quote, statistic, and reference in generated text against a fetched source before it ships. Prevents fabricated citations, plausible-but-wrong attributions, mis-stated quotes, broken DOIs/URLs, and "I remember reading that" hallucinations. Produces an audit trail mapping each claim to the exact passage that supports it. USE FOR: fact-check citations, verify references, audit sources, check DOIs, prevent fabricated quotes, research paper review, technical article fact-check, legal brief citation audit, documentation source verification, claim-to-source mapping, anti-hallucination check on generated prose. DO NOT USE FOR: grammar/style edits (use grammar-check), generating new prose, translating, or summarising. This skill never writes content — it only verifies what already exists.

A reusable five-axis code-review workflow for PowerShell/DSC changes: review for design, correctness, complexity, tests, and clarity/naming; size changes to stay reviewable; label findings by severity (Blocker / Major / Minor / Nit); separate must-fix from opinion; and keep review turnaround fast. The bar is "would a senior engineer approve this?" USE FOR: code review, review this change, PR review, reviewer checklist, review standards, severity labels, nit vs blocker, change sizing, reviewable diff, what to look for in a review, approve or request changes, review feedback tone, self-review before pushing. DO NOT USE FOR: the multi-phase PowerShell security review with SARIF/CVSS (use the code-review prompt or the security-reviewer agent), agentic/LLM security review (use agent-security-review), adversarial critique of a design or document (use devils-advocate-review), multi-perspective document peer review (use the peer-review prompt).

Report how many tokens, API calls, and how much wall time a project has consumed in Copilot, and convert those tokens into GitHub AI Credits and dollars at the published per-model rates. Carries the repository-scoped join, the verified fact that input_tokens already contains cache_read_tokens, and the cost column that holds a legacy request multiplier rather than money. USE FOR: how many tokens has this project used, what did this repo cost me in credits or dollars, token consumption per repository or branch, usage for a day or a date range, which model burned the most context, cache-hit ratio, API call counts, per-session totals, comparing VS Code chat against Copilot CLI usage. DO NOT USE FOR: advice on lowering spend or token-reduction tips (use chronicle cost-tips), standups and session search (use chronicle), measuring whether a Customization triggers or works (use agent-evals), choosing a Copilot plan, invoices, or seat management.

Create Outlook email drafts from Markdown email files via COM automation in PowerShell. Parses metadata tables (To, CC, Subject) from Markdown, converts Markdown body to styled HTML (tables, bold, lists), and saves drafts to the Outlook Drafts folder. Handles COM lifecycle, locked items, duplicate cleanup, and batch processing of multiple email files. USE FOR: create draft, Outlook draft, email draft, draft email, batch drafts, markdown to email, md to Outlook, create email from markdown, reminder email, save draft, Outlook Drafts folder, bulk email drafts, convert markdown email. DO NOT USE FOR: sending emails (use send-outlook-email skill), reading email (use outlook-email-export skill), calendar invites, Exchange Web Services, Microsoft Graph API.

Reference for the Datum PowerShell DSC configuration data module: hierarchical data composition, Datum.yml, resolution precedence, merge strategies (MostSpecific, hash, deep, UniqueKeyValTuples, DeepTuple), knockout prefix, lookup_options, DatumStructure, store providers, Datum handlers (InvokeCommand, ProtectedData), RSOP, Roles/Configurations pattern, and the DscWorkshop reference. Includes ProjectDagger patterns: 15-layer hierarchy, Scenario overrides (Tiny/Normal/Extended), ServiceTag-scoped roles, TinyAdditionalRole, cross-domain refs, conditional precedence. USE FOR: Datum, Datum.yml, ResolutionPrecedence, lookup_options, merge strategy, MostSpecific, deep/hash merge, UniqueKeyValTuples, DeepTuple, knockout prefix, RSOP, Get-DatumRsop, Resolve-NodeProperty, Lookup, New-DatumStructure, DatumHandlers, Protect-Datum, DSC config data, Roles pattern, DscWorkshop, Sampler.DscPipeline, Scenario/Tiny override, ServiceTag role. DO NOT USE FOR: Sampler build framework, build debugging, AutomatedLab.

A disciplined general debugging workflow for PowerShell/DSC code, builds, and tests: reproduce, localize, reduce to a minimal case, fix the root cause, then guard with a regression test. Stop-the-line on a red build; fix causes not symptoms; never swallow an error to make a failure disappear. A language-neutral method with PowerShell tactics (-ErrorAction Stop, try/catch, Get-PSCallStack). USE FOR: debugging, how to debug, systematic debugging, reproduce the bug, isolate the failure, root cause analysis, minimal repro, bisect a regression, flaky test, intermittent failure, error handling strategy, stop the line, regression guard, works on my machine, heisenbug. DO NOT USE FOR: DSC resource failures on a node (use dsc-troubleshooting), WinRM connectivity (use winrm-troubleshooting), Sampler build or Pester failure diagnosis (use sampler-build-debug), whether a long job is stuck (use long-running-job-monitor), security review (use agent-security-review).

Argue against a proposal, design, claim, or draft from a hostile-but-fair position, with explicit safeguards against sycophancy and premature concession. Forces every rebuttal to clear an evidence bar before the Devil''s Advocate is allowed to back down, so the critique survives user pushback that is merely persistent rather than substantive. USE FOR: red-team a design, challenge a thesis, stress-test an RFC or ADR, pre-mortem a plan, critique a draft article, dispute reviewer comments, steelman the opposite position, debate mode, anti-sycophancy review, pushback-resistant critique. DO NOT USE FOR: friendly proofreading (use grammar-check), fact verification (use citation-integrity), or generating new content. This skill only attacks existing content.

Three-stage workflow for co-authoring a substantive document with a user: (1) Context Gathering with meta-questions + info dump + clarifying questions; (2) Refinement section-by-section with clarify → brainstorm → curate → draft → surgical edits; (3) Reader Testing where a fresh assistant or subagent reads the doc cold and answers predicted reader questions to surface blind spots. Pairs with technical-writer, legal-researcher, and tax-researcher agents. USE FOR: co-author a document, write a spec, write a design doc, write a PRD, write an RFC, write a decision doc, write a proposal, draft a post-mortem, draft a Schriftsatz, section-by-section drafting, reader test a document, doc blind spot check, refine doc iteratively, info-dump workflow, brainstorm section options, surgical edit, fresh-eyes review. DO NOT USE FOR: short emails, code review, README authoring, pure copy editing (use grammar-check).

Read and edit DOCX (Word) files without Word or pandoc. Recipe 1: convert DOCX to Markdown via .NET-native ZIP/XML parsing in PowerShell (English and German style names). Recipe 2: edit a DOCX in place via OOXML unpack → edit-XML → repack, with tracked changes (w:ins / w:del with author + date), comments, and accept-all-changes via LibreOffice headless. USE FOR: convert docx to markdown, docx to md, extract text from Word, parse docx in PowerShell, read docx without Word, edit docx in place, edit Word file without Word, add tracked changes to docx, redline Word document, add comment to docx programmatically, accept tracked changes, OOXML unpack repack, w:ins, w:del, w:commentReference, docx attachment, pandoc unavailable, pandoc broken, docx without pandoc. DO NOT USE FOR: creating a DOCX from Markdown (use pandoc-docx-export), preserving complex formatting on conversion, images, charts, SmartArt.

Debug PowerShell DSC resource failures on target nodes: LCM diagnostics, event log analysis, debugging with Wait-Debugger and Enter-PSHostProcess, cache clearing, exit codes, installer log analysis, patching third-party DSC resources, and remote troubleshooting via AutomatedLab Invoke-LabCommand. Includes Windows Server 2025 issues (Start-Process UNC hangs, class-based ForceModuleImport failures). USE FOR: DSC error, DSC resource failed, debug DSC resource, Wait-Debugger, Enter-PSHostProcess, Debug-Runspace, LCM state, Get-DscConfigurationStatus, DSC event log, exit codes 30066/3010/17022, ProviderOperationExecutionFailure, Set-TargetResource failed, DSC cache, WmiPrvSE, ForceModuleImport, Enable-DscDebug, xDscDiagnostics, MSI installer DSC, PsDscRunAsCredential debug, Start-DscConfiguration error, UNC hang, Windows Server 2025 DSC. DO NOT USE FOR: writing new DSC resources, pull server setup, Azure Automation DSC, Sampler builds.

Drive the Mein ELSTER web form by machine to capture a German tax return — Hauptvordruck, Anlage N, V, V-Sonstige, KAP, Vorsorgeaufwand — while the taxpayer authenticates and transmits personally. Covers the stable ERiC field numbers behind name="fields[…]", sub-page navigation, repeat rows, sub-forms, mandatory-field traps, eData gaps, and a machine comparison of every target amount against the summary page. USE FOR: ELSTER, Mein ELSTER, Steuererklärung erfassen, Formular ausfüllen, Anlage V, Anlage N, Anlage Vorsorgeaufwand, Teilseite, Wiederholzeile, Kennzahl, ERiC, eruV/eruN field ids, Daten vorhanden, Prüfen und Steuer berechnen, Transferticket, eData, Entwurf fortsetzen, automating a German tax portal form with Playwright. DO NOT USE FOR: deciding what is deductible or drafting an Einspruch (use german-tax-research), login and cookies (use authenticated-web-extraction), reading receipts (use pdf-to-markdown, xlsx-to-markdown), Anlagen bundles (use evidence-package-assembly).

Assembles paginated evidence packages (Anlagen) for authorities, courts, and insurers on Windows: verifies documents against the claims made about them, decides which sheets may be omitted, renders a Markdown cover with a locator index to PDF via pandoc and headless Edge, merges with pypdf, and verifies page ranges, text layer, and the sources' own page numbering. USE FOR: Anlage bauen, Beweispaket, Belege zusammenstellen, evidence package, exhibit bundle, Deckblatt, Fundstellenverzeichnis, locator index, Markdown nach PDF, markdown to PDF on Windows, pandoc Edge headless, print-to-pdf erzeugt keine Datei, Edge headless exit 0 kein PDF, PDFs zusammenfuehren, welche Seiten darf ich weglassen, Seiten aus Kontoauszug entfernen, Schwaerzung, redact bank statement, Seitenzaehlung lueckenlos. DO NOT USE FOR: extracting text from PDFs (use pdf-to-markdown), Markdown to Word (use pandoc-docx-export), slides (use marp-slide-overflow), legal or tax argumentation (use german-legal-research, german-tax-research).

Legal research and statement drafting for German law (Deutsches Recht). Specializes in tenancy/rental law (Mietrecht), property management (Immobilienverwaltung), operating cost disputes (Betriebskostenstreit), landlord-tenant relationships, and general civil law under the BGB. Produces structured Schriftsätze, Aufforderungsschreiben, and Rechtsgutachten in German with proper citation and argumentation. USE FOR: German law, Mietrecht, tenancy disputes, Betriebskosten, Nebenkostenabrechnung, Mietminderung, Kündigung, Schönheitsreparaturen, Kaution, Mängel, Instandhaltung, Verkehrssicherungspflicht, Schriftsatz, Abmahnung, BGB, BetrKV, WEG, Mietvertrag, Zivilrecht, Wohnraummietrecht, Hausverwaltung, Rauchwarnmelder, Dachrinnenreinigung, Gartenpflege. DO NOT USE FOR: Strafrecht, Steuerrecht (use german-tax-research), Ausländerrecht, Familienrecht (unless intersecting tenancy), international law, non-German jurisdictions.

German income tax (Einkommensteuer) case work: reviews an assessment notice, computes the objection deadline, answers a Belegaufforderung point by point, reconciles every figure against the transmitted return, and drafts Einspruch, Begründung, and applications in formal German with exact § citations. USE FOR: Einkommensteuer, Steuererklärung, ELSTER, Steuerbescheid prüfen, Einspruch, Einspruchsbegründung, Belegaufforderung, Einspruchsfrist, Bekanntgabefiktion, Aussetzung der Vollziehung, Verspätungszuschlag, Schätzung, Anlage V, Vermietung und Verpachtung, AfA, § 7i Denkmal, Werbungskosten, Arbeitszimmer, Homeoffice-Pauschale, Fortbildungskosten, Reisekosten, Arbeitsmittel, Sonderausgaben, Kapitalerträge, Lebensmittelpunkt, § 153 AO, German income tax return. DO NOT USE FOR: Miet- or Arbeitsrecht argumentation (use german-legal-research), building the Anlagen PDF (use evidence-package-assembly), reading a PDF or XLSX (use pdf-to-markdown, xlsx-to-markdown), tax law outside Germany.

Quantified requirements engineering with Tom and Kai Gilb's method: gives every quality a Planguage Scale and Meter with benchmarks and numeric targets, ranks design ideas in an Impact Estimation Table, plans delivery as measurable Evo steps, and inspects specifications with Specification Quality Control. USE FOR: Gilb method, Tom Gilb, Kai Gilb, Planguage, Competitive Engineering, quantify a requirement, unmeasurable requirement, Scale and Meter, Goal Fail Stretch Wish, Past Record Trend, non-functional requirement, requirements engineering, Anforderungsmanagement, Anforderungen quantifizieren, Lastenheft, impact estimation table, IET, Evo, evolutionary project management, Specification Quality Control, SQC, majors per page. DO NOT USE FOR: unquantified requirements interview (use grill-me), code review (use code-review-and-quality), prose drafting (use doc-coauthoring), source verification (use citation-integrity).

Identify grammar, logical, and flow errors in text and suggest targeted fixes without rewriting the entire text. Analyzes spelling, punctuation, subject-verb agreement, tense consistency, contradictions, unsupported claims, transitions, redundancy, passive voice, and tone consistency. USE FOR: grammar check, proofread, proofreading, check grammar, review text, fix writing, spelling errors, punctuation, flow check, readability, text review, edit text, writing quality, documentation review, review docs, check README, review help text, comment-based help review. DO NOT USE FOR: generating new content from scratch, translating text, summarizing content, writing documentation (use technical-writer agent).

Adversarial requirements interview that grills the user with 40-100 questions across purpose, users, inputs/outputs, failure modes, edge cases, security, performance, ownership, rollback, observability, non-goals, and open questions — before any code, design, or diagram is written. The interview transcript becomes the spec; pairs with spec-driven development and Brooks' *Design of Design*. USE FOR: grill me, grill-me, adversarial requirements interview, spec interview, requirements interrogation, design concept before code, Brooks Design of Design, what could go wrong, edge case interview, pre-flight requirements, interview before implementation, refuse to code until spec, no code yet, spec-driven dev kickoff. DO NOT USE FOR: writing code, writing tests, reviewing diffs, generating documentation from existing code, code review, refactoring, quantifying requirements in Planguage or applying the Gilb method (use gilb-requirements-engineering).

Monitors long-running test suites, builds, installations, and deployments, including a run the agent starts itself with no user request, using timestamped logs, heartbeats, terminal markers, out-of-band probes, and WORKING/STALLED/DONE/FAILED classification. Survives control-channel drops; a restart starts a new readiness epoch. USE FOR: run the test suite, full suite, Pester run, Invoke-Pester, build.ps1, test.ps1, verification run, regression run, live test, live proof, proof run, integration test, deployment, installation, long-running job, is it stuck, still running, watch deployment, remote job, SSH, WinRM, keep me posted, answering while a job runs. DO NOT USE FOR: diagnosing why a build or test failed (use sampler-build-debug), writing test code (use pester-patterns), AutomatedLab Proxmox provisioning (use automatedlab-proxmox), WinRM connectivity diagnosis (use winrm-troubleshooting), short commands, skill authoring (use skill-creator), agent evals (use agent-evals).

Detect and fix silent content overflow in Marp slide decks before exporting to PPTX/PDF/PNG (anything taller than the 1280x720 viewBox is clipped with no warning). Also covers pre-rendering mermaid fences to SVG, a PNG-based visual verification workflow, a Puppeteer overflow detector, dense/compact CSS density tiers, a fillRatio decision table, and selectable-text PPTX export. USE FOR: Marp overflow, slide content clipped, content cut off in PPTX, slide overflow detection, Marp scrollHeight, dense/compact class, fillRatio, marp-cli overflow, Marp backgroundColor frontmatter, Marp mermaid not rendering, mermaid-cli mmdc, pre-render mermaid SVG, mermaid missing in PDF/PPTX, verify slide fits PNG, split slide vs shrink, editable PPTX, selectable text PPTX, marp pptx-editable, SOFFICE_PATH, LibreOffice PPTX, editable PPTX notes, speaker notes dropped, pptx-editable notes missing, copy pptx notes, python-pptx notes. DO NOT USE FOR: Reveal.js, Slidev, PowerPoint authoring, generic CSS layout, font rendering bugs.

Design, scaffold, and ship Model Context Protocol (MCP) servers that expose an API or local capability as well-named tools an LLM can call. Four-phase workflow (research → implement → review → evaluate), TypeScript vs Python SDK choice, stdio vs streamable-HTTP transport, tool naming and description discipline, Zod / Pydantic schemas, pagination, actionable error messages, MCP Inspector testing, and a 10-question realistic-task eval rubric. Windows / VS Code Copilot stdio gotchas included. USE FOR: build MCP server, write MCP server, Model Context Protocol, MCP tool design, MCP transport, MCP Inspector, FastMCP, MCP TypeScript SDK, MCP stdio, MCP streamable HTTP, register tool with MCP, MCP tool schema, MCP pagination, MCP error messages, MCP eval, wrap an API as MCP, mcp.tool, server.registerTool, Zod schema, Pydantic schema. DO NOT USE FOR: configuring MCP servers in .vscode/settings.json, writing REST/GraphQL APIs, writing MCP clients.

Deploy and troubleshoot Microsoft Endpoint Configuration Manager (MECM/SCCM) via DSC using ConfigMgrCBDsc, CommonTasks, and UpdateServicesDsc in DscWorkshop/Datum environments. Covers ADK/WinPE product registration, SCCM 2509 silent install, UpdateServicesDsc bugs, Datum merge strategies for Tiny scenarios, cross-domain SQL access, and AutomatedLab patterns. USE FOR: SCCM DSC, MECM DSC, ConfigMgrCBDsc, xSccmInstall, xSccmPreReqs, ADK product ID, ADK GUID mismatch, WinPE product name, SetupWpf.exe, SCCM silent install, SCCM 2509, ConfigurationManagerDeployment, UpdateServicesDsc, WSUS DSC, Products/Classifications wildcard, DatabaseInstance, SqlServerName, TinyMecmSiteServer, ConfigMgrVersion ValidateSet, SetupWpf mutex, cross-domain SQL, Kerberos double-hop SCCM, ADK offline layout. DO NOT USE FOR: general DSC troubleshooting, Sampler builds, Datum basics, AutomatedLab.

Initializes, repairs, checks, and safely migrates a repository Memory Bank with a minimal canonical file set, routed loading, evidence-based templates, retention rules, and additive role-specific extensions. Preserves existing files and migrates legacy role records by verified copy, never silent moves. USE FOR: initialize memory bank, create .memory-bank, missing memory bank, bootstrap project memory, create index.md, create projectbrief.md, create productContext.md, create activeContext.md, create techContext.md, create progress.md, create systemPatterns.md, create promptHistory.md, repair incomplete memory bank, check memory bank health, stale project memory, migrate legacy memory bank, namespace career/legal/tax records, old deadlines or session-log files, role-record migration. DO NOT USE FOR: read-only questions, clarifications, transient session notes, replacing an existing complete Memory Bank, VS Code native memory.

Create, list, and manage Microsoft To Do tasks via the Graph REST API using raw OAuth2 device code flow in PowerShell. Bypasses the buggy Microsoft.Graph SDK (WAM broker issues, System.Text.Json conflicts, empty context after auth). Handles personal Microsoft accounts (live.com identity provider) that cannot use tenant-specific auth. Includes clean Edge profile launch to avoid cached localhost redirects from MSAL. USE FOR: create To Do task, Microsoft To Do, Graph API tasks, device code auth, OAuth2 device flow, To Do reminder, task list, create task with reminder, To Do API, personal Microsoft account Graph auth, live.com Graph auth, bypass WAM, bypass MSAL, raw OAuth2 PowerShell, device code flow PowerShell, Graph REST API PowerShell, To Do tasks from script, bulk create To Do tasks. DO NOT USE FOR: Outlook COM tasks (use Outlook COM directly), Exchange tasks, calendar events (use calendar APIs), sending email (use send-outlook-email skill).

Export Outlook calendar entries to Markdown files via COM automation in PowerShell. Covers recurring appointments (IncludeRecurrences), date range filtering, Markdown generation with metadata tables, index file creation, and UTF-8 encoding best practices (BOM avoidance). USE FOR: export calendar, Outlook calendar, calendar to markdown, Termine exportieren, Kalender export, calendar sync, Outlook COM calendar, appointment export, recurring appointments, calendar index. DO NOT USE FOR: sending calendar invites (use send-outlook-email skill), exporting emails (use outlook-email-export skill), Microsoft Graph API, Exchange Web Services.

Export and extract emails from Outlook via COM automation in PowerShell. Covers searching by sender, recipient, CC, subject, or date range across Inbox, Sent Items, Direct, and Deleted Items folders. Exports to Markdown files with metadata tables. Handles COM elevation issues, DASL filters, recipient enumeration, deduplication, incremental exports, .msg extraction, and embedded email processing via CreateItemFromTemplate. USE FOR: export emails, extract emails, Outlook export, read emails, email to markdown, export Outlook folder, search Outlook emails, email extraction, COM automation Outlook, Outlook COM, export mailbox, Mueller emails, email archive, export calendar, Outlook calendar, .msg extraction, embedded email, CreateItemFromTemplate. DO NOT USE FOR: sending emails (use send-outlook-email skill), Microsoft Graph API, Exchange Web Services, IMAP/POP access.

Export Markdown documents to polished DOCX files using pandoc with custom formatting: landscape pages for wide tables, custom column widths, reduced table font sizes, and proper reference.docx styling. Covers pandoc Lua filter authoring, OOXML section breaks, reference document customization, and common gotchas. USE FOR: convert markdown to docx, export to Word, pandoc export, markdown to Word, landscape tables, docx formatting, pandoc Lua filter, table column widths, table font size docx, reference.docx, block quote shading docx, inline code background Word, grey highlight lost in Word, w:shd, VerbatimChar, BlockText, mixed orientation docx, wide table formatting, pandoc Word export, document export, emoji shortcodes docx, GitHub emoji to Unicode, emoji in Word export, mermaid diagram docx, render mermaid to image, mermaid flowchart Word, mermaid Gantt chart image. DO NOT USE FOR: converting docx to markdown, PDF export (use LaTeX/weasyprint), HTML export, general pandoc usage without Word output.

Read, OCR, create, and manipulate PDF files. Recipe 1: convert PDFs to Markdown via .NET-native parsing in PowerShell. Recipe 4: OCR scanned PDFs with pymupdf + Tesseract tessdata_best on Windows. Beyond Extraction: merge, split, rotate, watermark, encrypt, decrypt, create from scratch with reportlab, and fill AcroForm fields via pypdf + qpdf. Handles German-locale PDFs (umlauts, ß) and structured documents (payslips, invoices, Bescheide). USE FOR: convert PDF to markdown, extract text from PDF, parse PDF, Entgeltabrechnung, payslip/invoice PDF, German PDF, Gehaltsabrechnung, scanned PDF, OCR PDF, Tesseract, tesseract deu, pymupdf OCR, TESSDATA_PREFIX, merge PDFs, split PDF, rotate PDF pages, watermark PDF, encrypt PDF, password-protect PDF, decrypt PDF, create PDF from scratch, reportlab PDF, fill PDF form, AcroForm fill, pypdf, qpdf. DO NOT USE FOR: complex vector graphics editing, XFA forms, PDF/A archival conversion, signing PDFs with a hardware token.

Common Pester 5 test patterns and recipes for PowerShell module testing. Covers mocking file systems, REST APIs, DSC resources, databases, credentials, and other external dependencies. Provides ready-to-use test templates for common scenarios. USE FOR: Pester test patterns, mock file system, mock REST API, mock database, test DSC resource, test credentials, parametrized tests, Pester recipes, test template, testing patterns, how to test, mock example, run Pester, invoke tests, VS Code hang, separate process. DO NOT USE FOR: debugging failing builds (use sampler-build-debug), migrating to Sampler (use sampler-migration), general Pester syntax (covered by pester.instructions.md).

Generate polished, interactive HTML reports, dashboards, tables, charts, and network diagrams from PowerShell objects with the PSWriteHTML module — no HTML, CSS, or JavaScript required. Covers New-HTML, New-HTMLTable (DataTables: filtering, paging, conditional formatting), New-HTMLChart, Section/Panel/Tab layout, New-HTMLDiagram, Out-HtmlView, large-dataset tuning, and HTML email bodies. Cross-platform, dependency-free. USE FOR: PSWriteHTML, New-HTML, New-HTMLTable, New-HTMLChart, New-HTMLDiagram, Out-HtmlView, HTML report from PowerShell, PowerShell dashboard, interactive HTML table, DataTables report, AD/DSC/inventory HTML report, conditional formatting table, HTML email body, Save-HTML, Dashimo, Emailimo. DO NOT USE FOR: sending email (use send-outlook-email), Markdown-to-Outlook drafts (use create-outlook-draft), slide decks (use marp-slide-overflow), Word/PDF export (use pandoc-docx-export), reading xlsx/pdf/docx (use the *-to-markdown skills).

Runs an on-demand, project-scoped review queue for reusable lessons taken from explicitly selected local artifacts. Records a candidate with a stable identifier, a sanitized summary, evidence locators with content identity, and separated observations, interpretations, and contradictory evidence. It deduplicates equivalents, retains rejections and supersessions, and promotes a lesson into an existing Skill or Instruction only after a human approves a concrete preview. A candidate never loads automatically and never changes agent behavior on its own. USE FOR: capture a lesson from a correction or a resolved failure, review or discard captured candidates, propose an improvement to an existing Skill or Instruction, preview and approve a promotion. DO NOT USE FOR: initializing or curating the Memory Bank base (use memory-bank), authoring a Skill from scratch (use skill-creator), usage telemetry, health dashboards, cross-project learning, or sweeping transcripts and other repositories.

Debug and troubleshoot Sampler-based PowerShell module builds and Pester 5 test failures. Covers running builds safely (without freezing VSCode), reading Pester results, diagnosing common mock/assertion failures, fixing tests, and reproducing a CI-only failure at the exact commit CI built. USE FOR: build fails, test fails, Pester errors, troubleshoot build, debug tests, run build, Sampler build, module build, Pester mock issues, VSCode freezes during build, passes locally but fails in CI, CI-only test failure, reproduce a CI failure, clean checkout reproduction, GitVersion 0.0.1 fallback version. DO NOT USE FOR: creating new modules from scratch, Azure deployments, CI/CD pipeline config.

Reference for the Sampler PowerShell module build framework: project structure, build.yaml, dependency management, build workflows and tasks, custom build tasks, testing patterns, GitVersion versioning, CI/CD pipelines (Azure Pipelines, GitHub Actions), DSC/Datum configuration data projects, VSCode integration, multi-module repositories, community files, troubleshooting, and command reference. USE FOR: Sampler, build.yaml, RequiredModules.psd1, Resolve-Dependency, ModuleBuilder, InvokeBuild, New-SampleModule, Add-Sample, Sampler project structure, PowerShell module build, GitVersion configuration, CI/CD pipeline, Azure Pipelines PowerShell, DSC Datum, DscWorkshop, Sampler.DscPipeline, custom build task, Pester configuration, code coverage threshold, NuGet, Publish-Module, PowerShell Gallery, Set-SamplerTaskVariable, multi-module repository, patched module. DO NOT USE FOR: debugging Sampler builds (sampler-build-debug), legacy migration (sampler-migration), Pester syntax, AutomatedLab.

Step-by-step guide for migrating a legacy PowerShell module project to the Sampler build framework. Covers migrating from AppVeyor, PSDepend, PSDeploy, Pester 4, and other legacy build systems to full Sampler scaffolding with ModuleBuilder, InvokeBuild, Pester 5, GitVersion, and Azure Pipelines. USE FOR: migrate to Sampler, Sampler setup, new Sampler project, legacy module migration, PSDepend to Sampler, AppVeyor to Sampler, PSDeploy to Sampler, Pester 4 to Pester 5, Sampler project structure, Sampler conventions. DO NOT USE FOR: debugging existing Sampler builds (use sampler-build-debug), Azure deployments, CI/CD pipeline config outside of Sampler.

Send emails via the Outlook COM API from PowerShell. Supports plain-text and HTML-formatted emails, sending to self or specified recipients, with subject and body content. Handles COM object lifecycle (create, send, release). USE FOR: send email, email summary, Outlook email, send via Outlook, email myself, mail summary, HTML email, send notification, email report. DO NOT USE FOR: reading email, calendar invites, Outlook rules, Exchange Web Services, Microsoft Graph API email.

Use this skill when authoring, auditing, or improving Skills/**/SKILL.md files against the Agent Skills open standard: progressive disclosure (body ≤ 500 lines, references one level deep), the six-step authoring frame, category-level descriptions with train/validation trigger evals, the 1024-char description cap, and cross-skill overlap audits. Use it even when the user does not say "skill" — a request to package, reuse, or fix a repeatable workflow is in scope. USE FOR: authoring or revising a skill, building one out of existing material, deciding whether something deserves a skill at all and whether it is one skill, two, or a reference instead, diagnosing why one is not selected, description and discoverability work, frontmatter and budget conformance, and restructuring an oversized body into references. DO NOT USE FOR: writing Instructions/*.instructions.md, Agents/*.agent.md, or prompts; configuring MCP servers; running an eval harness end to end (use agent-evals).

Recency-bounded sweep of what people publicly say about a topic over the last N days (default 30) across GitHub, Hacker News, Reddit, and Stack Overflow, plus YouTube and X via browser. Produces a lead sheet (platform, date, signal, link, what-to-verify) to seed deeper research. Strictly leads-only: social chatter is never citable evidence and must be verified before use. No engine, keys, or cookies; uses web fetch, the GitHub tools, and the simple browser. USE FOR: last 30 days, last N days, what are people saying about X, recent discussion, recency sweep, social signal, community sentiment, Reddit search, Hacker News search, GitHub activity last month, Stack Overflow recent questions, lead generation for research, find leads. DO NOT USE FOR: citable evidence or facts (use research-analyst VERIFY + citation-integrity), verifying a claim (use citation-integrity), authenticated or private scraping (use authenticated-web-extraction), exporting mail or calendar (use the outlook-* skills).

Protocol for delegating work to subagents: picking the model per role, writing a dispatch prompt that carries the task instead of the session history, handing artifacts over as files, keeping a durable ledger that survives context compaction, handling the four report statuses, and capping the fix loop before it turns into churn. USE FOR: dispatch a subagent, delegate to a subagent, subagent prompt, which model for a subagent, subagent model selection, subagent context, subagent report, task brief, review package, subagent ledger, resume after compaction, parallel subagents, fix loop, re-review, blind re-performance, independent recomputation, the agent said it was done, verify a subagent's work, runSubagent, controller context. DO NOT USE FOR: the review rubric itself (use code-review-and-quality), authoring a Custom agent definition or a Skill (use skill-creator), measuring whether a Customization works (use agent-evals), monitoring a long-running process (use long-running-job-monitor).

Test-first workflow for PowerShell and DSC work: the red-green-refactor loop, writing a failing Pester 5 test before the code, the test pyramid (unit-heavy), DAMP-over-DRY test readability, choosing what and at which level to test, and making behaviour changes test-first rather than test-after. Enforces "no production change without a covering test" as a checkable gate. USE FOR: TDD, test-driven development, test first, red green refactor, write the test first, failing test before code, what should I test, test pyramid, unit vs integration test, coverage discipline, regression test for a bug, characterization test, DAMP tests, arrange act assert, testable design. DO NOT USE FOR: Pester recipes and mocking templates (use pester-patterns), diagnosing a failing build or test (use sampler-build-debug), Pester syntax (see pester.instructions.md), running tests without freezing VS Code (see powershell-execution-safety.instructions.md), evaluating skills/prompts/agents (use agent-evals).

Transcribe long audio/video on Windows with GPU acceleration using faster-whisper (CTranslate2) and add speaker labels with pyannote.audio. Covers ffmpeg audio extraction, Python 3.12 venv, CUDA-matched PyTorch wheel selection, faster-whisper large-v3 inference, pyannote 3.1 diarization with Hugging Face gated-model access, and merging speaker turns into Whisper segments to produce speaker-labeled SRT, JSON, and grouped transcript text. Includes the Windows torchcodec bypass (preload via torchaudio) and Tee-Object exit-code trap. USE FOR: transcribe video/audio, faster-whisper, whisper GPU, large-v3, ctranslate2, pyannote.audio, speaker diarization, who spoke when, RTTM, SRT, German transcription, ffmpeg audio extract, 16 kHz mono WAV, Hugging Face gated model, HF_TOKEN, GatedRepoError, pyannote/speaker-diarization-3.1, CUDA torch wheel, cu128, torchcodec Windows. DO NOT USE FOR: real-time streaming, dictation UIs, cloud transcription APIs, audio editing/denoising, voice cloning, TTS.

Captures Windows GUI screenshots from modifiable apps, third-party executables, and already-open windows, then assembles screenshot-embedded Markdown manuals. Selects the correct API for WPF, WinForms, Win32/GDI, WebView2, Avalonia, and WinUI 3; covers external-process driving, event-based readiness, GPU black frames, native dialogs, state restoration, and content validation. USE FOR: capture Windows GUI screenshot, automate app screenshots, screenshot-based user manual, document existing Windows exe, third-party desktop app screenshots, capture an already-open window, screenshot Edge or Chrome window, CopyFromScreen fallback, WPF, WinForms, Win32, WebView2, Avalonia, WinUI 3, PrintWindow black, SetWinEventHook, RenderTargetBitmap, DrawToBitmap, CapturePreviewAsync, Windows.Graphics.Capture, MessageBox #32770 capture, STA GUI PowerShell. DO NOT USE FOR: cross-platform or mobile screenshots, screen-video capture, general desktop RPA without screenshot-documentation intent, generic GUI tutorials.

Diagnoses WinRM failures on Windows servers and AutomatedLab VMs: service startup, listeners, HTTP.sys/IIS, authentication, HTTPS, firewall, TrustedHosts, limits, double hop, and fallback channels. USE FOR: WinRM error, HTTP 500, quickconfig failure, StopPending, service won't start, listener missing, connection refused/denied/timeout, Enter-PSSession failure, Invoke-Command failure, WSManFault, 0x80338170, 0x80070005, 0x80090322, firewall, HTTPS, CredSSP, TrustedHosts, Kerberos, double hop, PowerShell Direct, MaxEnvelopeSize, port 5985/5986, Test-WSMan, ping works but WinRM is closed after reboot. DO NOT USE FOR: AutomatedLab Proxmox lifecycle ordering (use automatedlab-proxmox), monitoring a running remote job (use long-running-job-monitor), SSH remoting, Azure Automation DSC, general networking.

Read, create, and edit XLSX (Excel) files. Recipe 1: convert XLSX to Markdown tables via .NET-native ZIP/XML parsing in PowerShell — no Excel COM, ImportExcel, or Python required. Beyond Extraction: create new workbooks and edit existing ones with openpyxl + pandas (no Excel install), the cardinal rule "write Excel formulas, never hardcoded computed values", header formatting / freeze panes / number formats, and a recalc + error-scan pass via LibreOffice headless that catches every #REF! / #DIV/0! / #VALUE! / #N/A / #NAME?. USE FOR: convert xlsx to markdown, Excel to markdown, xlsx to md, parse Excel in PowerShell, read xlsx without Excel, Excel attachment, create xlsx, write xlsx with formulas, openpyxl, pandas to_excel, edit xlsx, recalc xlsx, scan xlsx for formula errors, #REF! in xlsx, financial model in Excel, freeze header row. DO NOT USE FOR: Excel charts and pivot tables, Excel COM automation, files requiring style preservation that openpyxl drops.