Skip to main content
This guide explains the AI Skills system that provides on-demand context and patterns to AI agents working with the Prowler codebase.
What are AI Skills? Skills are structured instructions that help AI agents (Claude Code, Cursor, Copilot, etc.) understand Prowler’s conventions, patterns, and best practices.
Skills live in the skills/ directory of the Prowler OSS repository. Each skill is a folder containing a SKILL.md file with its patterns and metadata.

​
Installation

To enable skills for the supported AI coding assistants, run the setup script from the repository root: 
./skills/setup.sh
The script creates symlinks so each tool finds the skills in its expected location:
ToolCreated by setup
Claude Code.claude/skills/ symlink and CLAUDE.md
Gemini CLI.gemini/skills/ symlink and GEMINI.md
Codex (OpenAI).codex/skills/ symlink (uses AGENTS.md natively)
GitHub Copilot.github/copilot-instructions.md symlink to AGENTS.md
After running the setup, restart the AI coding assistant to load the skills.

​
Using Skills

AI agents discover skills automatically and load them when a request matches a skill trigger. To load a skill manually during a session, point the agent to the skill’s SKILL.md file: 
Read skills/{skill-name}/SKILL.md
For the full list of available skills, their triggers, and the Auto-invoke mappings, see the skills/README.md and AGENTS.md in the repository.

​
Available Skills

TypeSkills
Generictypescript, react-19, nextjs-16, tailwind-4, pytest, playwright, django-drf, zod-4, zustand-5, ai-sdk-5, vitest, tdd
Prowlerprowler, prowler-sdk-check, prowler-api, prowler-ui, prowler-mcp, prowler-provider, prowler-compliance, prowler-compliance-review, prowler-docs, prowler-pr, prowler-ci, prowler-attack-paths-query
Testingprowler-test-sdk, prowler-test-api, prowler-test-ui
Metaskill-creator, skill-sync
This table is a snapshot. The repository is the source of truth: see skills/README.md for the current, complete list.

​
Skill Structure

Each skill follows the Agent Skills spec: 
skills/{skill-name}/
├── SKILL.md          # Patterns, rules, decision trees
├── assets/           # Code templates, schemas
└── references/       # Links to local docs (single source of truth)

​
Key Design Decisions

  1. Self-contained skills - Critical patterns inline for fast loading
  2. Local doc references - No web URLs, points to docs/developer-guide/*.mdx
  3. Single source of truth - Skills reference docs, no duplication
  4. On-demand loading - AI loads only what’s needed for the task

​
Creating New Skills

Use the skill-creator meta-skill to create new skills that follow the Agent Skills spec. See AGENTS.md for the full list of available skills and their triggers.

​
How Skills Work

The diagrams below explain the internals of the skill system. They are useful for understanding the design, but are not required to install or use skills.

​
Architecture Overview

​
Request Lifecycle

​
With and Without Skills

​
Full Component Map