Robotti-io/copilot-security-instructions
Agent
Audits and improves this repository’s security-focused Copilot library content (root-level agents/, prompts/, skills/, README.md, copilot-instructions.md) and proposes concrete patches.
Robotti-io/copilot-security-instructions
Agent
Creates and maintains GitHub Copilot customization Markdown files (agents, prompts, instructions, skills) with correct YAML frontmatter and consistent structure.
Robotti-io/copilot-security-instructions
Agent
Implements MCP HTTP/JSON-RPC/SSE behaviors correctly in src/ and verifies with tests and curl-based checks.
Robotti-io/copilot-security-instructions
Agent
Hardens the MCP server and Express layer in src/ against common web and protocol abuse (limits, logging hygiene, validation, DoS).
Robotti-io/copilot-security-instructions
Agent
Orchestrates MCP server development in src/ by delegating to protocol, tooling, and security specialists and producing PR-ready patches.
Robotti-io/copilot-security-instructions
Agent
Builds and refactors MCP tools/prompts/resources in src/ with correct schemas, naming consistency, and stable outputs.
Robotti-io/copilot-security-instructions
Agent
Designs new security-focused prompts/skills for this library and refactors existing ones into clear, deterministic, reusable templates.
Robotti-io/copilot-security-instructions
Instructions file GitHub Copilot
Instructions for Robotti-io/copilot-security-instructions, covering general markdown rules, yaml frontmatter conventions, authoring standards per file type, a) custom agent profiles: agents/.agent.md and b) prompt files: prompts/.prompt.md.
Robotti-io/copilot-security-instructions
Instructions file GitHub Copilot
Instructions for Robotti-io/copilot-security-instructions, covering instructions for copilot customization markdown files, required structure, frontmatter requirements by file type, .agent.md and .prompt.md.
Robotti-io/copilot-security-instructions
Instructions file GitHub Copilot
Instructions for Robotti-io/copilot-security-instructions, covering mcp server development rules (this repo), core standards, express / http handling, mcp tools and logging hygiene.
Robotti-io/copilot-security-instructions
Instructions file GitHub Copilot
Instructions for Robotti-io/copilot-security-instructions, covering security library authoring rules (this repo), global requirements, root prompt files: prompts/.prompt.md, skills: skills//skill.md and agents: agents/.agent.md.
Robotti-io/copilot-security-instructions
Skill Claude CodeCodex
Use this skill when creating or editing GitHub Copilot customization Markdown files (agent profiles, prompt files, instruction files, and skills).
Robotti-io/copilot-security-instructions
Agent
Triage and explain application security risks. Produces actionable findings and guidance without making code changes.
Robotti-io/copilot-security-instructions
Agent
Designs secure architectures and guardrails. Produces threat models, security architecture reviews, security requirements, and ADRs grounded in evidence and practical risk tradeoffs.
Robotti-io/copilot-security-instructions
Agent
Fixes application security issues end-to-end root-cause analysis, code changes, tests, and safe-by-default patterns.
Robotti-io/copilot-security-instructions
Agent
Entry-point AppSec router that standardizes intake, delegates to specialist agents, and synthesizes evidence-first outputs.
Robotti-io/copilot-security-instructions
Agent
Designs secure architectures and guardrails. Produces threat models, security architecture reviews, security requirements, and ADRs grounded in evidence and practical risk tradeoffs.
Robotti-io/copilot-security-instructions
Skill Claude CodeCodex
Analyze repository-grounded identity, access control, and authorization design with evidence-first reporting and script-validated Mermaid diagrams.
Robotti-io/copilot-security-instructions
Skill Claude CodeCodex
Triage a dependency CVE using local repo evidence and remediation guidance.
Robotti-io/copilot-security-instructions
Skill Claude CodeCodex
Threat model a system, feature, service, or PR using Shostack's 4Q workflow, evidence-first analysis, risk scoring, and CLI-friendly Mermaid helper scripts.
Robotti-io/copilot-security-instructions
Skill Claude CodeCodex
Review workflow for AI/LLM output usage to prevent over-trust, injection, and unsafe automation.
Robotti-io/copilot-security-instructions
Skill Claude CodeCodex
Process for tightening input validation, canonicalization, and safe parsing to prevent injection and logic abuse.
Robotti-io/copilot-security-instructions
Skill Claude CodeCodex
Workflow for preventing secret leaks and sensitive logging (PII/credentials) and adding redaction defaults.
Robotti-io/copilot-security-instructions
Skill Claude CodeCodex
Repeatable process for an application security code review that produces prioritized findings and fix guidance.