GovOn copilot-instructions.md

GovOn copilot-instructions.md is an instructions file for GitHub Copilot from GovOn-Org/GovOn. It costs 279 tokens per session, scanned A, original, MIT.

Review instructions for GitHub Copilot that define which pull-request problems to report and how to label them.

In plain words
What is it for?
Writing pull-request review comments with [MUST], [SHOULD], or [QUESTION] tags, while skipping minor formatting issues and reviews with no significant findings.
Why use it?
They keep reviews focused on bugs, security risks, data loss, runtime errors, and meaningful quality or performance problems instead of minor style preferences.

Instructions file for GitHub Copilot

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/govon-org/govon/copilot-instructions
Clone the repo
git clone --depth 1 https://github.com/GovOn-Org/GovOn

Made for: GitHub Copilot.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for GovOn copilot-instructions.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/govon-org/govon/copilot-instructions.svg)](https://agentmods.dev/instructions/govon-org/govon/copilot-instructions)
Your own site
<a href="https://agentmods.dev/instructions/govon-org/govon/copilot-instructions"><img src="https://agentmods.dev/badge/instructions/govon-org/govon/copilot-instructions.svg" alt="Measured on agentmods" height="20"></a>
Per session 279 This file is loaded in full into every session.
When invoked 279 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00279 $0.00279
Opus 5 $0.00139 $0.00139
Sonnet 5 $0.00056 $0.00056
Haiku 4.5 $0.00028 $0.00028

Measured 3d ago against content hash 682b7729c4ed, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

GovOn copilot-instructions.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.github/copilot-instructions.md · 30 lines

What it actually says

GitHub Copilot PR Review Instructions

Review Tag System

Every review comment must begin with one of the following tags.

Tag Criteria Comment Required
[MUST] Bugs, security vulnerabilities, data loss risk, runtime errors Always required
[SHOULD] Code quality issues, maintainability problems, performance issues, potential regressions Always required
[NITS] Style, naming, comment wording, minor formatting Do not write
[QUESTION] Questions to understand intent Write when necessary

Review Criteria

Report ([MUST] / [SHOULD] tags)

  • [MUST]: Bugs, security vulnerabilities, data loss risk, runtime errors
  • [SHOULD]: Code quality issues, maintainability problems, performance issues, potential regressions

Do Not Report

  • [NITS]-level: Style preferences, variable/method naming preferences, comment wording, minor formatting
  • Preference-based suggestions on already-working code
  • Pointing out code that is consistent with existing codebase patterns

When to Skip Review

If there are no [MUST] or [SHOULD] level issues, do not write any review comments.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 3d ago First seen · 30 lines · 279 tokens per session scan A 682b7729c4ed

Subscribe to this mod's changes

GovOn copilot-instructions.md is an instructions file published in the GitHub repository GovOn-Org/GovOn (2 stars, last pushed 3d ago), licensed MIT. It adds 279 tokens to every session, about $0.0014 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.