python-skills copilot-instructions.md

Repository instructions for GitHub Copilot, an AI coding assistant, when working on Python applications. They define the project’s tools, architecture, coding style, security rules, testing expectations, and logging practices.

In plain words
What is it for?
Use them to guide work in Python 3.11+ projects using frameworks such as FastAPI, Django, Flask, SQLAlchemy, pytest, Ruff, and mypy.
Why use it?
They give Copilot consistent project context and guardrails instead of requiring each session to rediscover the codebase’s standards.

Instructions file for GitHub Copilot

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/rishapgandhi/python-skills/copilot-instructions
Clone the repo
git clone --depth 1 https://github.com/rishapgandhi/python-skills

Made for: GitHub Copilot.

Per session 594 This file is loaded in full into every session.
When invoked 594 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00594 $0.00594
Opus 5 $0.00297 $0.00297
Sonnet 5 $0.00119 $0.00119
Haiku 4.5 $0.00059 $0.00059

Measured 2d ago against content hash 46f1ace4b83c, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

python-skills copilot-instructions.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.github/copilot-instructions.md · 63 lines

How it starts

The opening of the file, as written. The whole thing — 63 lines — stays where its author put it; the contents beside it link to each section on GitHub.

GitHub Copilot Custom Instructions

Repository-level instructions for GitHub Copilot. Canonical standards live in skills/ — this file provides Copilot-specific context.

Role

You are a senior Python engineer following AurigaIT enterprise standards. All code must be production-quality.

Stack

  • Python 3.11+ | FastAPI / Django / DRF / Flask
  • SQLAlchemy 2.x (async) | Pydantic v2 | pydantic-settings
  • pytest + factory_boy | Ruff | mypy --strict
  • structlog for logging | OpenTelemetry for observability

Mandatory Rules

  • 4 spaces indentation, no tabs
  • Full type annotations on all function signatures
  • Docstrings on all public functions and classes
  • No hardcoded secrets — use pydantic-settings from environment variables
  • All logging via structlog — never use print()
  • All DB access through ORM/repository — no raw SQL unless parameterised
  • Tests required for all business logic — 80% coverage minimum
  • All API endpoints authenticated unless explicitly marked public
  • Never use mutable default arguments
  • Catch specific exceptions — never bare except:
  • Monetary values use Decimal, never float
  • Layer discipline: API → Service → Repository → Model

Code Style

  • Formatter: Ruff (Black-compatible)
  • Line length: 120
  • Import order: stdlib → third-party → local (enforced by Ruff isort)
  • Prefer | union syntax over Optional[] (Python 3.10+)
  • Use from __future__ import annotations for forward references

Testing Conventions

  • Test files mirror source: app/services/user_service.pytests/unit/services/test_user_service.py
  • Use factory_boy for test data — never hardcode inline
  • Async tests with pytest-asyncio (asyncio_mode = "auto")
  • Name tests descriptively: test_create_user_with_duplicate_email_raises_conflict

API Design

  • URLs: /api/v1/{resource} — plural nouns, kebab-case
  • Response envelope: {"data": {...}} for single, {"data": [...], "pagination": {...}} for lists
  • Error format: {"error": {"code": "MACHINE_CODE", "message": "Human message"}}
  • Always paginate list endpoints (default 20, max 100)

Read the full file on GitHub · 63 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 63 lines · 594 tokens per session scan A 46f1ace4b83c

Subscribe to this mod's changes

python-skills copilot-instructions.md is an instructions file published in the GitHub repository rishapgandhi/python-skills (4 stars, last pushed 3mo ago), licensed MIT. It adds 594 tokens to every session, about $0.0030 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.