agent365-skills: Instructions file for GitHub Copilot

.github/copilot-instructions.md

agent365-skills copilot-instructions.md is an instructions file for GitHub Copilot from microsoft/agent365-skills. It costs 11,406 tokens per session, scanned A, original, MIT.

Instructions for setting up and using Microsoft Agent 365 skills, which configure agents for Microsoft services such as Teams, Azure, mail, and calendars.

In plain words
What is it for?
Use them to create AI Teammates, register other Agent 365 agents, connect WorkIQ tools, add observability, validate code, or run a local smoke test.
Why use it?
They show which setup path and follow-up skills to use for registering agents, adding tools, tracing activity, and testing locally.

Instructions file for GitHub Copilot ✓ vendor

Written for GitHub Copilot: a Copilot instructions file. Also seen: names the AskUserQuestion tool; mentions Claude Code.

This is microsoft/agent365-skills's own configuration. It tells GitHub Copilot how to work on agent365-skills itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything agent365-skills configures →

About the project

Microsoft Agent 365 Skills is a collection of coding-agent skills and MCP configuration for building and operating AI Teammates hosted in Microsoft Teams. It supports the Agent 365 lifecycle, including WorkIQ integration, registration, observability, validation, and local testing, for users of Claude Code and GitHub Copilot.

microsoft/agent365-skills · 50 stars · on GitHub

Reuse

Borrowing it

Nothing to install: this file belongs to microsoft/agent365-skills. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/microsoft/agent365-skills/main/.github/copilot-instructions.md
Clone the repo
git clone --depth 1 https://github.com/microsoft/agent365-skills

Made for: GitHub Copilot.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for agent365-skills copilot-instructions.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/microsoft/agent365-skills/copilot-instructions/github.svg)](https://agentmods.dev/instructions/microsoft/agent365-skills/copilot-instructions)
Your own site
<a href="https://agentmods.dev/instructions/microsoft/agent365-skills/copilot-instructions"><img src="https://agentmods.dev/badge/instructions/microsoft/agent365-skills/copilot-instructions/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for agent365-skills copilot-instructions.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/microsoft/agent365-skills/copilot-instructions"><img src="https://agentmods.dev/badge/instructions/microsoft/agent365-skills/copilot-instructions.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 11,406 This file is loaded in full into every session.
When invoked 11,406 The same file — it is already loaded in full.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.11406 $0.11406
Opus 5.5 $0.04562 $0.04562
Sonnet 5.5 $0.02281 $0.02281
Haiku 4.5 $0.01141 $0.01141

Measured 20d ago against content hash c03fa675e415, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

agent365-skills copilot-instructions.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 20d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.github/copilot-instructions.md · 426 lines

How it starts

The opening of the file, as written. The whole thing — 426 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Agent 365 Skills — GitHub Copilot Instructions

Skills for instrumenting and registering Microsoft Agent 365 agents. When a user asks for any of the trigger phrases below, follow the corresponding SKILL.md exactly.


Quick reference

Skill When to invoke Delegates to
a365-setup Entry point — CLI install, Azure prereqs, capability menu make-ai-teammate (AI Teammate path) or make-a365-agent (other paths)
make-ai-teammate Transform an agent into an AI Teammate (Teams / Copilot publish) instrument-observability (auto), add-workiq-tools (offered)
make-a365-agent Non-AI-Teammate blueprint provisioning (Register / Observability / WorkIQ paths) instrument-observability (optional), add-workiq-tools (optional, skipped for S2S)
add-workiq-tools Wire MCP servers (Mail / Calendar / Word / etc.) into the agent —
instrument-observability OTel + A365 tracing exporter wiring —
a365-code-validator A365 observability/MAC Activity validation with optional guided fixes —
purview-dlp-integration Add a Purview DLP gate that blocks sensitive prompts before the LLM —
test-local Launch agent + AgentsPlayground for local smoke test —

Skills are designed to be additive, idempotent, and state-aware — re-running is safe.


Task Execution Discipline

When a skill creates a task list, run every task to completion in one turn — do not pause between phases. Mark each task complete the moment its phase finishes (TaskUpdate in Claude Code, - [ ] → - [x] in Copilot Chat / CLI). Surface a one-line status update between phases instead of asking permission.

Only pause at these explicit interaction points:

  • a365-setup: capabilities menu; authMode (non-AI-Teammate only); install confirmations for missing tools; Azure login.
  • make-ai-teammate: Phase 0B confirm; 0C row-8 sub-question; 9.6 WorkIQ offer; 9.7.1a Reuse/Re-run/Fresh; 9.7.2 Run Target + 9.7.2b hosting.
  • make-a365-agent: agent name + directory; reuse-blueprint; hosted vs local; observability/WorkIQ offers.
  • add-workiq-tools: MCP server selection; Word @mention offer (only when mcp_WordServer is selected and stack is Node.js LangChain).
  • instrument-observability: agent kind + auth mode (only if not in cache).
  • a365-code-validator: after the report, asks whether to apply safe fixes, create a fix plan, or stop.
  • purview-dlp-integration: DLP policy choice (new / existing / skip); agentic auth handler name and app id/display name only when not discoverable from a365 config.
  • test-local: confirm before launching.

Read the full file on GitHub · 426 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 20d ago Changed · +3 tokens per session c03fa675e415
  2. 1mo ago Changed · +591 tokens per session 804308999911
  3. 1mo ago Changed · +46 lines · +1,370 tokens per session 4b257ce52cb8
  4. 2mo ago First seen · 380 lines · 9,442 tokens per session scan A ffc6a92eeaf0

Subscribe to this mod's changes

agent365-skills copilot-instructions.md is an instructions file published in the GitHub repository microsoft/agent365-skills (50 stars, last pushed 16d ago), licensed MIT. It adds 11,406 tokens to every session, about $0.0456 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

agent365-skills copilot-instructions.md compared with instructions from other repositories

agent365-skills copilot-instructions.md next to 6 instructions from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
agent365-skills copilot-instructions.mdmicrosoft/agent365-skillsInstructions file5016d agoMITA11,406GitHub Copilot
vscode buildNext.instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA9,719GitHub Copilot
next.js AGENTS.mdvercel/next.jsInstructions file143ktodayMITA7,461Codex, OpenCode
langchain AGENTS.mdlangchain-ai/langchainInstructions file149kyesterdayMITA4,680Codex, OpenCode
vscode oss-third-party-notices.instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA5,516GitHub Copilot
vscode copilot-instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA3,093GitHub Copilot
deepseek-harness AGENTS.mddeepseek-ai/deepseek-harnessInstructions file274k2d agoMITA4,313Codex, OpenCode