Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/microsoft/github-constellation-software/copilot-instructionsgit clone --depth 1 https://github.com/microsoft/github-constellation-softwareWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.01431 | $0.01431 |
| Opus 5 | $0.00715 | $0.00715 |
| Sonnet 5 | $0.00286 | $0.00286 |
| Haiku 4.5 | $0.00143 | $0.00143 |
Grade A, and why
github-constellation-software copilot-instructions.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 118 lines — stays where its author put it; the contents beside it link to each section on GitHub.
GitHub @ CSI repository instructions
Commands
- Use Node.js 22, matching the GitHub Actions workflows.
- Install the locked dependencies with
npm ci. - Start the local Vite server with
npm run dev. - Validate the visual contract with
npm run design:lint. - Run the production validation with
npm run build. This runstsc --noEmitbefore the Vite multi-page build. - Run only the TypeScript check with
npm run typecheck. - Preview the generated
dist/artifact withnpm run preview. - No test runner or general source-lint script is currently configured, so
there is no single-test command.
design:lintvalidates onlyDESIGN.md. Do not invent test or lint commands; use the documented checks unless the repository adds a runner.
Architecture
This is a static, README-driven React site deployed to GitHub Pages.
DESIGN.mdis the project-specific visual contract. Read it before changing UI, CSS, layout, responsive behavior, or visual components. It is normative unless it conflicts with a Primer component API or accessibility guidance.- The canonical page content lives in four Markdown files:
README.md,build-days/README.md,csi-pricing/README.md, andusage-based-billing/README.md. Keep them useful when viewed directly on GitHub; the Pages site enhances the same content rather than maintaining a separate copy. src/content.tsimports those READMEs with Vite's?rawloader and is the central registry for page IDs, routes, labels, descriptions, source paths, and table-of-contents extraction.- Each public route has its own HTML entry point. Its
<body>suppliesdata-pageanddata-site-root;src/App.tsxuses those values to select content and construct project-relative URLs. vite.config.tsdeclares every HTML entry underbuild.rollupOptions.input.base: './'is required so assets resolve under the/github-constellation-software/GitHub Pages project path.src/App.tsxis the shared Primer shell. It owns navigation, theme persistence, Markdown rendering, link/image normalization, heading anchors, tables of contents, and deep-link scrolling.src/main.tsxloads Primer primitives, Primer Markdown styles, and the repository-specific styles fromsrc/styles.css.- Pull requests run
.github/workflows/ci.yml; pushes tomainbuild and deploydist/through.github/workflows/deploy-pages.yml.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 118 lines · 1,431 tokens per session scan A cee5a05f4e0d
github-constellation-software copilot-instructions.md is an instructions file published in the GitHub repository microsoft/github-constellation-software (11 stars, last pushed 17d ago), licensed MIT. It adds 1,431 tokens to every session, about $0.0072 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other instructions, from other repositories
nyann CLAUDE.md
Instructions for thettwe/nyann, covering claude.md, architecture & conventions, skill authoring rules (apply to every skill.md) and scope reminders.
MirrorArc AGENTS.md
AGENTS.md instructions for cz1993/MirrorArc, covering what this repo is, ownership (non-negotiable), the no-data rule (critical, zero tolerance), protect the differentiators and tech + quality bar.
stridetastic CLAUDE.md
Claude Code instructions for 0wulf/stridetastic, covering project overview, purpose, key features, architecture and system architecture.
github-copilot-starter accessibility.instructions.md
Guidelines for improving the accessibility of a website to ensure it is usable for everyone, including people with disabilities.
github-copilot-starter security.instructions.md
Comprehensive secure coding instructions for all languages and frameworks, based on OWASP Top 10 and industry best practices.
github-copilot-starter copilot-instructions.md
Copilot instructions for devbyray/github-copilot-starter, covering 🧱 project overview, 🎯 purpose, 🔧 general guidelines, 📚 guidelines structure and 🎯 agent skills (dynamic loading).