Enterprise shared library of GitHub Copilot customization assets — agents, skills, instructions, and prompts.
Agent Claude Code
GitHub organization security posture auditor. USE FOR: auditing GitHub organization settings and policies, reviewing branch protection configurations, analyzing secret scanning and Dependabot alerts, assessing team and RBAC permissions, evaluating OAuth app restrictions. DO NOT USE FOR: fixing security issues (use…
Agent Claude Code
BaseCoat guidance documentation author. USE FOR: creating security playbooks and best practices, authoring new instruction files and agent templates, writing skill documentation, drafting guidance framework updates. DO NOT USE FOR: incident response, operational tasks, code implementation.
Agent Claude Code
Detects missing instruction coverage for a repo — identifies tech stacks and workflow patterns present in the codebase that have no corresponding BaseCoat instruction file in the overlay. USE FOR: find uncovered tech stacks in a repo overlay, audit BaseCoat instruction file gaps, identify missing workflow pattern…
Agent Claude Code
Policy-as-code compliance agent for validating code and configuration against organizational rules, managing exceptions, and producing audit-ready compliance reports. USE FOR: validate Terraform against OPA policies, generate compliance audit reports, manage policy exceptions. DO NOT USE FOR: writing application…
Agent Claude Code
Detects drift between live GitHub Project automation rules and the canonical AIDL guardrail baseline. USE FOR: scheduled drift audits of project automation rules, comparing live rule configuration against a baseline manifest, classifying drift severity, generating issue-ready remediation output, and running advisory…
Agent Claude Code
Secrets lifecycle management - discovery, rotation, expiry scanning, emergency revocation, and Vault patterns for infrastructure and application secrets. USE FOR: plan secrets rotation schedules, scan for expiring credentials, execute emergency revocation after credential exposure, verify replacement consumers. DO NOT…
Agent Claude Code
Security analysis and threat assessment specialist. USE FOR: threat modeling, security risk assessment, vulnerability analysis. DO NOT USE FOR: incident response, remediation.
Agent Claude Code
Detection engineering and SIEM configuration — maps MITRE ATT&CK tactics to detection rules, builds alerting baselines, and operationalizes NIST CSF Detect. USE FOR: build ATT&CK-mapped detection rules, calibrate SIEM alert thresholds, map compliance to detection coverage. DO NOT USE FOR: live incident response…
Agent Claude Code
Provide SOC (Security Operations Center) playbook guidance for threat detection, incident response, secrets rotation, audit logging, and operational security. USE FOR: run SOC incident response playbook, triage security alerts, coordinate credential rotation post-breach. DO NOT USE FOR: building SIEM detection rules…
Agent Claude Code
Sprint closeout validation specialist. USE FOR: verifying merged PR coverage, CI health, unresolved errors/issues, test evidence, and carry-forward actions with owners. DO NOT USE FOR: feature coding, incident postmortem replacement, or long-range roadmap planning.
Agent Claude Code
Secure software supply chain with artifact signing, SBOM generation, and provenance tracking. USE FOR: generate SBOM for a release build, sign artifacts with Sigstore and verify provenance, assess and improve SLSA compliance level. DO NOT USE FOR: general dependency vulnerability scanning, runtime security monitoring.
Agent Claude Code
Continuous backlog-delivery conductor that burns the issue backlog oldest to newest in dependency-ordered waves, unattended until stopped or blocked. USE FOR: running persistent multi-wave backlog delivery; coordinating design, scope, test, merge-queue, and deploy gates; driving standalone or fleet backlog burndown.…
Agent Claude Code
Unified backlog orchestration agent. USE FOR: priority reranking, sprint/wave reassignment with dependency checks, and capacity-aware portfolio balancing. DO NOT USE FOR: unsafeguarded mass reassignment, dependency-violating moves, or unreviewed metadata churn.
Agent Claude Code
Use when CI or local builds are failing and the team needs fast, repeatable triage to isolate root cause and restore green status. USE FOR: classify failure signatures, pinpoint failing stage/test/toolchain segment, propose minimal safe remediation, and generate a fix validation checklist. DO NOT USE FOR: feature…
Agent Claude Code
Background merge-control agent that keeps healthy lanes moving while isolating broken lanes and dispatching cloud break-fix PRs. USE FOR: lane-aware merge orchestration, CI break containment, cloud fix delegation, and safe resume after recovery. DO NOT USE FOR: bypassing branch protection, direct pushes to protected…
Agent Claude Code
Detects N consecutive CI failures on the same workflow job, opens a blocking issue, and gates further deploys to that environment — the andon cord / halt-the-line pattern for CI/CD pipelines. USE FOR: gate deploys on CI failures, open blocking issues, enforce halt-line policy. DO NOT USE FOR: fixing failing tests…
Agent Claude Code
Accelerate CI pipeline guardrail checks by parallelizing independent jobs, fast-pathing known-safe change sets, and eliminating redundant validation steps. USE FOR: reduce CI cycle time, identify parallelizable job groups, detect redundant checks, fast-path documentation-only or config-only PRs. DO NOT USE FOR…
Agent Claude Code
Designs and reviews data pipelines for lakehouse, quality, and machine-learning workflows. USE FOR: medallion lakehouse architecture, Delta Lake pipelines, data quality checks, feature engineering, and ML training orchestration. DO NOT USE FOR: transactional application databases, dashboard-only reporting, or generic…
Agent Claude Code
Approve-once delivery orchestrator that evaluates readiness, executes merge policy, and escalates deterministic remediation payloads. USE FOR: running end-to-end approved issue -> PR -> release automation, driving merge and escalation decisions from policy-backed status signals, and generating deterministic dry-run…
Agent Claude Code
Diagnoses policy and environment gate blockers in delivery workflows and produces minimal-safe unblock actions with deterministic evidence artifacts. USE FOR: environment approval deadlocks, permissions and branch-policy gate failures, Pages/deployment gate state diagnostics, and workflow-blocker RCA with validation…
Agent Claude Code
Structured incident response and recovery agent for classifying incidents, guiding mitigation, coordinating communications, verifying recovery, and facilitating post-incident learning. USE FOR: classify and triage active production incidents, coordinate credential-exposure containment, guide on-call mitigation steps…
Agent Claude Code
Automates routing of incident signals into prioritized backlog or maintenance work items with required portfolio fields pre-populated and closure linkage tracked. USE FOR: create GitHub issues from incident metadata with Type/Priority/Risk/Guardrail State/SRE Impact pre-filled, route incidents to sprint or maintenance…
Agent Claude Code
Orchestrates Azure infrastructure deployments using Bicep, handles resource group management, parameter validation, and rollback strategies. USE FOR: deploy Azure Bicep templates, manage resource group lifecycle, execute infrastructure rollback. DO NOT USE FOR: application code deployments, cost analysis and…
Agent Claude Code
Topology-aware local data-pack orchestrator that detects repository persistence stores and executes generate/validate/update/delete lifecycle operations for Docker Compose test environments with deterministic seed artifacts. USE FOR: discovering active persistence engines in a repo, generating local compose/data-pack…
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: