by microsoft
Desktop app that records your on-screen work session and uses the GitHub Copilot CLI to reconstruct it as an intent + ordered steps, then builds a reusable Skill or Automation for Microsoft Scout, Microsoft Copilot Cowork, or Copilot Studio.
# Add to your Claude Code skills
git clone https://github.com/microsoft/skill-recorderGuides for using ai agents skills like skill-recorder.
Last scanned: 8/3/2026
{
"issues": [
{
"type": "npm-audit",
"message": "@huggingface/transformers: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "@mapbox/node-pre-gyp: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "adm-zip: adm-zip: Crafted ZIP file triggers 4GB memory allocation",
"severity": "high"
},
{
"type": "npm-audit",
"message": "brace-expansion: brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash",
"severity": "high"
},
{
"type": "npm-audit",
"message": "cacache: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "fast-uri: fast-uri vulnerable to host confusion via literal backslash authority delimiter",
"severity": "high"
},
{
"type": "npm-audit",
"message": "get-windows: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "make-fetch-happen: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "node-gyp: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "onnxruntime-node: Vulnerability found",
"severity": "high"
},
{
"type": "npm-audit",
"message": "sharp: sharp inherited vulnerabilities in libvips: CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591",
"severity": "high"
},
{
"type": "npm-audit",
"message": "tar: node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal",
"severity": "critical"
}
],
"status": "FAILED",
"scannedAt": "2026-08-03T07:24:51.664Z",
"npmAuditRan": true,
"pipAuditRan": true,
"promptInjectionRan": true
}See how skill-recorder compares with popular alternatives.
skill-recorder is an open-source ai agents skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by microsoft. Desktop app that records your on-screen work session and uses the GitHub Copilot CLI to reconstruct it as an intent + ordered steps, then builds a reusable Skill or Automation for Microsoft Scout, Microsoft Copilot Cowork, or Copilot Studio. It has 3,565 GitHub stars.
skill-recorder failed SkillsLLM's automated security scan, which flagged one or more high-severity issues. Review the Security Report section carefully before using it.
Clone the repository with "git clone https://github.com/microsoft/skill-recorder" and add it to your Claude Code skills directory (see the Installation section above).
skill-recorder is primarily written in TypeScript. It is open-source under microsoft on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other AI Agents skills you can browse and compare side by side. Open the AI Agents category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh skill-recorder against similar tools.
No comments yet. Be the first to share your thoughts!
Requires a passing catalog security scan. Resolve the flagged issues and resubmit to enable featuring.
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
Record yourself doing a task once, then turn it into a skill your AI agent can repeat.
Skill Recorder captures a real work session on your screen: the clicks, the app and window switches, the pages you visit, and (if you want) your spoken narration. It then uses the GitHub Copilot CLI to reconstruct what you actually did as a clear intent plus an ordered list of steps. From there, one step turns that single run into something an agent can reuse:
SKILL.md procedure an agent runs on demand, orBoth prefer the agent's native tools (like the gh CLI or web_fetch) over replaying
UI clicks, and generalize from your one example, so recording yourself submitting one
form can teach the agent to submit all of them.
⌘⇧R / Ctrl+Shift+R from anywhere) and just do your
task. Skill Recorder captures your screen and activity locally, in the background.Skill Recorder is published as a source release: one command downloads a pinned Node.js runtime, builds the exact release commit on your machine, and adds a Skill Recorder (Source) app you can relaunch anytime. Nothing is installed globally. You'll need a GitHub account with Copilot access; the Copilot CLI ships with the app.
macOS is the primary target. Windows 11 (x64 and ARM64) is supported too (see
WINDOWS-VALIDATION.md).
Open the latest release and
copy the command for your platform. Each release pins an exact commit, so the real command looks
like the patterns below with <40-character-release-commit> filled in.
macOS / Ubuntu
commit="<40-character-release-commit>"; curl -fsSL "https://raw.githubusercontent.com/microsoft/skill-recorder/$commit/install.sh" | SKILL_RECORDER_COMMIT="$commit" bash
The commit pins both the downloaded script and the source it builds. To keep the app running
after the terminal closes, add SKILL_RECORDER_DETACHED=1 after the pipe:
commit="<40-character-release-commit>"; curl -fsSL "https://raw.githubusercontent.com/microsoft/skill-recorder/$commit/install.sh" | SKILL_RECORDER_COMMIT="$commit" SKILL_RECORDER_DETACHED=1 bash
On macOS this adds a Skill Recorder (Source) app to ~/Applications (relaunch from Spotlight,
Launchpad, or the Dock). On Ubuntu it adds a matching application entry.
Windows (PowerShell)
$commit="<40-character-release-commit>"; $env:SKILL_RECORDER_COMMIT=$commit; irm "https://raw.githubusercontent.com/microsoft/skill-recorder/$commit/install.ps1" | iex
This adds Skill Recorder (Source) shortcuts to your desktop and Start Menu.
To inspect the script before running it, set install options, update, or uninstall, see
INSTALL.md.
⚠️ Keep secrets out of your recordings. Don't record, type, paste, or narrate passwords, tokens, API keys, or other confidential info. Choosing Analyze sends recording data to GitHub's cloud. Skill Recorder reminds you before every recording. Details in What gets captured.
Everything below is for people who want the details, or want to hack on the code.
Recording, storage, frame extraction, and optional narration transcription all happen on your computer; nothing leaves while you record. Only when you choose Analyze does Skill Recorder send the event timeline (window/document titles, URLs, and clipboard previews), extracted screen images, and narration text to GitHub's cloud for Copilot to process.
The in-app "Records your screen and activity" panel spells out exactly what's collected:
⚠️ Please don't capture secrets. Passwords, access tokens, API keys, credentials, and other confidential information should never be recorded, typed, pasted, shown, copied, or narrated during a session.
Requires Node.js 24. After checking out a release revision:
npm ci
npm run compliance:licenses
npm run dev
npm run dev starts Vite and launches the Electron app with hot-reload; ⌘⇧R (macOS) /
Ctrl+Shift+R (Windows) toggles recording from anywhere. Full manual setup, the build and
dist scripts, and the licensing boundary between local source builds and redistributable
packages are in INSTALL.md. Maintainers changing versions, dependencies,
assets, or releases must follow RELEASING.md.
The Copilot describer and builders have a fixture-based eval suite; see
evals/README.md.
npm run eval # score the describer against synthetic recordings
npm run eval:builder # score the skill/automation generalization
Please don't report security vulnerabilities through public GitHub issues. See
SECURITY.md for Microsoft's coordinated-disclosure process and reporting
channels.
File bugs and feature requests through
GitHub Issues (search existing issues
first to avoid duplicates). Support is limited to the resources described in
SUPPORT.md.
This project welcomes contributions and suggestions. Most contributions require you to agree to a Contributor License Agreement (CLA) declaring that you have the right to, and actually do, grant us the rights to use your contribution. For details, visit Contributor License Agreements.
When you submit a pull request, a CLA bot will automatically determine whether you need to provide a CLA and decorate the PR appropriately (e.g., status check, comment). Simply follow the instructions provided by the bot. You will only need to do this once across all repos using our CLA.
This project has adopted the Microsoft Open Source Code of Conduct. For more information see the Code of Conduct FAQ or contact opencode@microsoft.com with any additional questions or comments.
This project may contain trademarks or logos for projects, products, or services. Authorized use of Microsoft trademarks or logos is subject to and must follow Microsoft's Trademark & Brand Guidelines. Use of Microsoft trademarks or logos in modified versions of this project must not cause confusion or imply Microsoft sponsorship. Any use of third-party trademarks or logos are subject to those third-party's policies.