vinayaklatthe/microsoft-security-skills

This repository is a plugin that gives AI coding assistants specialized knowledge about Microsoft security products. Without it, an AI agent will give generic security advice when you ask about things like Defender, Sentinel, or Entra ID. With it installed, the agent knows the specific workflows, decision trees, and guardrails for each product area, drawn from public Microsoft documentation. The plugin contains 58 skills, each covering a distinct area of the Microsoft security portfolio. The coverage spans several domains: threat protection tools like Defender XDR, Defender for Endpoint, and Microsoft Sentinel, identity and access controls like Entra ID, Conditional Access, and Privileged Identity Management, compliance and data protection tools like Purview DLP and eDiscovery, endpoint management through Intune, cloud security tools across Azure, and a growing set of skills for AI and agent security, including how to control what Microsoft Copilot can access in your organization. The plugin works across multiple AI tools in one install. You can use it with GitHub Copilot in VS Code, Claude Code, Cursor, Codex CLI, and Gemini CLI. One install command handles all of them at once if you use the APM package manager, or you can install per-tool with a few commands using the skills CLI. The skills were built around a specific problem: security work is mostly a decision problem, not just a configuration task. Knowing which control applies, what order to enable things in, and what to validate before a policy goes live matters as much as knowing the feature exists. Each skill includes guardrails to prevent common mistakes, not just instructions on how to use the product. The README notes that the skills have been tested against two AI models to measure the improvement they provide over asking an unaided model the same questions. All content is grounded in publicly available Microsoft Learn documentation. No proprietary methodology or customer data is included. The project is released under the MIT license.