capacity-toolkit copilot-instructions.md

Repository instructions for a read-only-by-default toolkit that examines Azure capacity and enablement. Microsoft Azure is Microsoft’s cloud platform, and the toolkit’s full agent guidance is stored in a separate AGENTS.md file.

In plain words
What is it for?
Running Azure analysis scripts safely, confirming the active tenant and subscription, keeping access at Reader level, and validating quota-group changes before any approved execution.
Why use it?
Cloud inspection work can accidentally change or delete resources. These instructions restrict normal work to local output files and require explicit approval and checks for the limited provisioning action.

Instructions file for GitHub Copilot

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/microsoft/capacity-toolkit/copilot-instructions
Clone the repo
git clone --depth 1 https://github.com/microsoft/capacity-toolkit

Made for: GitHub Copilot.

Per session 418 This file is loaded in full into every session.
When invoked 418 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00418 $0.00418
Opus 5 $0.00209 $0.00209
Sonnet 5 $0.00084 $0.00084
Haiku 4.5 $0.00042 $0.00042

Measured yesterday against content hash b57cb3695cfc, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

capacity-toolkit copilot-instructions.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.github/copilot-instructions.md · 25 lines

What it actually says

Copilot instructions — Azure Capacity & Enablement Toolkit

This repository is a read-only-by-default Azure capacity/enablement toolkit. The full agent guidance lives in ../AGENTS.mdread it before running anything.

Non-negotiable rules:

  • READ-ONLY BY DEFAULT. With the analysis scripts, never create, modify, delete, scale or restart any Azure resource — the only writes are local files under output/. No az ... create/update/delete/set, no New-Az* / Set-Az* / Remove-Az*, no terraform apply, no kubectl apply/delete on your own initiative.
  • One opt-in write tool. Deploy-QuotaGroups.ps1 (with New-QuotaGroupConfig.ps1) provisions quota groups. Only run it on explicit human instruction, always -Action Validate + -WhatIf first, and confirm before any execute run. See ../docs/quota-groups.md.
  • Confirm tenant/subscription before login or context switch. Show az account show and wait for explicit user approval. Never silently change the active az context.
  • Minimum access is Reader (plus management-group read for quota groups). On AuthorizationFailed, report it as a finding — do not escalate or work around RBAC.
  • Treat all discovered data as tenant-confidential; never send it to third parties. Clear output/ before sharing any generated CSV/HTML.

Standard flow: Get-UsedSkus.ps1 (discover) → New-CapacityReport.ps1 -ConfigPath ... -Dashboard (report + dashboard) → open output/capacity-dashboard-<date>.html. See AGENTS.md §3–§6 for parameters, platform quirks, the interpretation guide, and the pre-share sanitization sweep.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 25 lines · 418 tokens per session scan A b57cb3695cfc

Subscribe to this mod's changes

capacity-toolkit copilot-instructions.md is an instructions file published in the GitHub repository microsoft/capacity-toolkit (5 stars, last pushed 2mo ago), licensed MIT. It adds 418 tokens to every session, about $0.0021 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other instructions, from other repositories

ai-pricing-hub-mcp CLAUDE.md

Claude Code instructions for OptimNow/ai-pricing-hub-mcp, covering claude.md - ai pricing hub mcp app, what this project does, architecture, data sources and the fallback chain and project structure.

OptimNow/ai-pricing-hub-mcp · 7,347 tokens

ai-pricing-hub-mcp AGENTS.md

AGENTS.md instructions for OptimNow/ai-pricing-hub-mcp: Before writing code, first explore the project structure, then invoke the chatgpt-app-builder skill for documentation.

OptimNow/ai-pricing-hub-mcp · 22 tokens

generative-ai-for-beginners AGENTS.md

Instructions for microsoft/generative-ai-for-beginners, covering agents.md, project overview, setup commands, initial repository setup and clone the repository.

microsoft/generative-ai-for-beginners · 2,850 tokens

azure-sdk-for-go go-examples.instructions.md

Instructions for Azure/azure-sdk-for-go, a project described as: This repository is for active development of the Azure SDK for Go. For consumers of the SDK we recommend visiting our public developer docs at.

Azure/azure-sdk-for-go · 113 tokens

GPT-RAG copilot-instructions.md

Instructions for Azure/GPT-RAG, covering repository development and release instructions, branching strategy, default behavior, feature development workflow and branch creation.

Azure/GPT-RAG · 1,899 tokens

azure-sdk-for-rust resourcemanager.instructions.md

Instructions for Azure/azure-sdk-for-rust, a project described as: This repository is for the active development of the Azure SDK for Rust. For consumers of the SDK we recommend visiting Docs.rs and looking up the docs for any of libraries in the SDK.

Azure/azure-sdk-for-rust · 400 tokens