AI Skills System

This guide explains the AI Skills system that provides on-demand context and patterns to AI agents working with the Prowler codebase.

What are AI Skills? Skills are structured instructions that help AI agents (Claude Code, Cursor, Copilot, etc.) understand Prowler’s conventions, patterns, and best practices.

Skills live in the skills/ directory of the Prowler OSS repository. Each skill is a folder containing a SKILL.md file with its patterns and metadata.

Installation

To enable skills for the supported AI coding assistants, run the setup script from the repository root:

./skills/setup.sh

The script creates symlinks so each tool finds the skills in its expected location:

Tool	Created by setup
Claude Code	`.claude/skills/` symlink and `CLAUDE.md`
Gemini CLI	`.gemini/skills/` symlink and `GEMINI.md`
Codex (OpenAI)	`.codex/skills/` symlink (uses `AGENTS.md` natively)
GitHub Copilot	`.github/copilot-instructions.md` symlink to `AGENTS.md`

After running the setup, restart the AI coding assistant to load the skills.

Using Skills

AI agents discover skills automatically and load them when a request matches a skill trigger. To load a skill manually during a session, point the agent to the skill’s SKILL.md file:

Read skills/{skill-name}/SKILL.md

For the full list of available skills, their triggers, and the Auto-invoke mappings, see the skills/README.md and AGENTS.md in the repository.

Available Skills

Type	Skills
Generic	typescript, react-19, nextjs-16, tailwind-4, pytest, playwright, django-drf, zod-4, zustand-5, ai-sdk-5, vitest, tdd
Prowler	prowler, prowler-sdk-check, prowler-api, prowler-ui, prowler-mcp, prowler-provider, prowler-compliance, prowler-compliance-review, prowler-docs, prowler-pr, prowler-ci, prowler-attack-paths-query
Testing	prowler-test-sdk, prowler-test-api, prowler-test-ui
Meta	skill-creator, skill-sync

This table is a snapshot. The repository is the source of truth: see skills/README.md for the current, complete list.

Skill Structure

Each skill follows the Agent Skills spec:

skills/{skill-name}/
├── SKILL.md          # Patterns, rules, decision trees
├── assets/           # Code templates, schemas
└── references/       # Links to local docs (single source of truth)

Key Design Decisions

Self-contained skills - Critical patterns inline for fast loading
Local doc references - No web URLs, points to docs/developer-guide/*.mdx
Single source of truth - Skills reference docs, no duplication
On-demand loading - AI loads only what’s needed for the task

Creating New Skills

Use the skill-creator meta-skill to create new skills that follow the Agent Skills spec. See AGENTS.md for the full list of available skills and their triggers.

How Skills Work

The diagrams below explain the internals of the skill system. They are useful for understanding the design, but are not required to install or use skills.

Concepts

Providers

Miscellaneous

Installation

Using Skills

Available Skills

Skill Structure

Key Design Decisions

Creating New Skills

How Skills Work

Architecture Overview

Request Lifecycle

With and Without Skills

Full Component Map

​Installation

​Using Skills

​Available Skills

​Skill Structure

​Key Design Decisions

​Creating New Skills

​How Skills Work

​Architecture Overview

​Request Lifecycle

​With and Without Skills

​Full Component Map

Installation

Using Skills

Available Skills

Skill Structure

Key Design Decisions

Creating New Skills

How Skills Work

Architecture Overview

Request Lifecycle

With and Without Skills

Full Component Map