Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/azure-samples/eshoplite/copilot-instructionsgit clone --depth 1 https://github.com/Azure-Samples/eShopLiteWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.01027 | $0.01027 |
| Opus 5 | $0.00513 | $0.00513 |
| Sonnet 5 | $0.00205 | $0.00205 |
| Haiku 4.5 | $0.00103 | $0.00103 |
Grade A, and why
eShopLite copilot-instructions.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 62 lines — stays where its author put it; the contents beside it link to each section on GitHub.
eShopLite Copilot Instructions
Project Overview
eShopLite is a modular .NET Aspire-based reference eCommerce platform demonstrating advanced AI, search, and orchestration patterns. Each scenario in scenarios/ is a self-contained solution, often integrating Azure, OpenAI, vector DBs, and/or agent protocols.
Architecture & Patterns
- Scenario-driven: Each folder in
scenarios/is a complete, runnable solution (see its README for details). Common patterns include:- AppHost Orchestration: All services (APIs, DBs, agents) are composed in
eShopAppHostusing .NET Aspire's builder API. - Service Boundaries: Projects like
Products,Store, andVectorEntitiesare reused across scenarios. - AI Integration: Semantic search, embeddings, and chat use Azure OpenAI, DeepSeek, or Chroma DB, configured via user-secrets or Aspire resource bindings.
- Agent/MCP Patterns: Some scenarios (e.g., 06-mcp, 07-AgentsConcurrent) use Model Context Protocol or Semantic Kernel for tool/function calling and agent orchestration.
- AppHost Orchestration: All services (APIs, DBs, agents) are composed in
Critical Workflows
- Build/Run:
- Always run from the scenario's
src/eShopAppHostusingdotnet run(or the provided VS Code task). - For Azure deployment, use
azd upfrom the scenario root afterazd auth login. - Local dev often requires Docker/Podman for containerized DBs (e.g., Chroma, SQL 2025).
- Always run from the scenario's
- Configuration:
- Azure/OpenAI endpoints and keys are injected via user-secrets (see scenario README for exact keys).
- Aspire auto-wires service URLs and credentials for local and cloud.
- Testing:
- Unit/integration tests are in
Products.Tests,Store.Tests, etc. Run withdotnet testfrom the scenario'ssrc.
- Unit/integration tests are in
- Telemetry:
- Aspire Dashboard and Azure Application Insights are integrated for all scenarios. Access dashboard URLs from console output after launch.
Project-Specific Conventions
- .NET Aspire: All orchestration is done in
eShopAppHost/Program.csusing the Aspire builder API. Services are referenced by logical names (e.g.,products,store,sql). - User Secrets: For local dev, always set connection strings using
dotnet user-secretsin the relevant project directory. - Azure Integration:
- Use
CredentialSource: AzureClifor local Azure auth. - Resource provisioning is handled by Aspire or Bicep files in
infra/.
- Use
- AI/Vector DBs:
- Embedding and search clients are registered in code with
AddAzureOpenAIClient,AddAzureSearchClient, or Chroma DB client. - For custom models (DeepSeek, GPT-4o, etc.), update connection strings and model names as shown in scenario READMEs.
- Embedding and search clients are registered in code with
- Agent/MCP:
- MCP tools are registered via attributes and exposed to LLMs for function calling.
- Agent orchestration (e.g., concurrent analysis) is implemented using Semantic Kernel or MCP SDK.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 62 lines · 1,027 tokens per session scan A fc519c89c611
eShopLite copilot-instructions.md is an instructions file published in the GitHub repository Azure-Samples/eShopLite (168 stars, last pushed 1mo ago), licensed MIT. It adds 1,027 tokens to every session, about $0.0051 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other instructions, from other repositories
chat-with-your-data-solution-accelerator copilot-instructions.md
Instructions for Azure-Samples/chat-with-your-data-solution-accelerator, covering chat with your data (cwyd) — repository instructions, repository layout (truth), mandatory references — consult before editing, external pattern sources — read-only and hard rules.
mcp-agent-langchainjs AGENTS.md
Instructions for Azure-Samples/mcp-agent-langchainjs, covering mcp agent langchain.js project instructions, architecture overview, component communication flow, key architectural patterns and authentication & state management.
e-commerce-agents CLAUDE.md
Instructions for nitin27may/e-commerce-agents, covering claude.md, what this is, working artifacts location, key commands and start everything from scratch (one command).
mcp-agent-langchainjs api.instructions.md
Instructions for Azure-Samples/mcp-agent-langchainjs: If you get it right you'll get a 1000$ bonus, but if you get it wrong you'll be fired.
mcp-agent-langchainjs genaiscript.instructions.md
Instructions for working with GenAIScript files.
mcp-agent-langchainjs webapp.instructions.md
Instructions for Azure-Samples/mcp-agent-langchainjs: If you get it right you'll get a 1000$ bonus, but if you get it wrong you'll be fired.