maestro copilot-instructions.md

maestro copilot-instructions.md is an instructions file for GitHub Copilot from SnapdragonPartners/maestro. It costs 952 tokens per session, scanned A, original, MIT.

Code-review rules for Maestro, a Go-based system that coordinates multiple AI agents. They prioritize correctness, avoiding repeated logic, testability, and compliance with project specifications over formatting concerns.

In plain words
What is it for?
They guide reviews of code changes and specification documents, including checking whether an implementation matches its stated requirements.
Why use it?
They help reviewers focus on bugs, crashes, data loss, security problems, and serious maintainability issues instead of comments that automated tools already handle.

Instructions file for GitHub Copilot

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/snapdragonpartners/maestro/copilot-instructions
Clone the repo
git clone --depth 1 https://github.com/SnapdragonPartners/maestro

Made for: GitHub Copilot.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for maestro copilot-instructions.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/snapdragonpartners/maestro/copilot-instructions.svg)](https://agentmods.dev/instructions/snapdragonpartners/maestro/copilot-instructions)
Your own site
<a href="https://agentmods.dev/instructions/snapdragonpartners/maestro/copilot-instructions"><img src="https://agentmods.dev/badge/instructions/snapdragonpartners/maestro/copilot-instructions.svg" alt="Measured on agentmods" height="20"></a>
Per session 952 This file is loaded in full into every session.
When invoked 952 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00952 $0.00952
Opus 5 $0.00476 $0.00476
Sonnet 5 $0.00190 $0.00190
Haiku 4.5 $0.00095 $0.00095

Measured 3d ago against content hash 81cfe72b3bb8, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

maestro copilot-instructions.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.github/copilot-instructions.md · 64 lines

How it starts

The opening of the file, as written. The whole thing — 64 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Copilot Code Review Instructions

Review Philosophy

This is a Go-based multi-agent AI orchestrator. Reviews should focus on correctness, DRYness, and testability — not style or formatting. We have aggressive linters (golangci-lint, pre-commit hooks) that handle formatting, naming, and import ordering. Do not comment on those.

Refer to AGENTS.md at the repository root for the full coding guidelines and severity levels (P0/P1). The rules there are authoritative. Key highlights:

  • Only block on P0 (bugs, crashes, data corruption, severe security) and P1 (clear guideline violations harming maintainability).
  • Everything else is a suggestion or question.
  • This is a single-user, locally run app — be pragmatic about security.

Spec Compliance Check

When a PR includes new or modified markdown files (especially under docs/), determine whether any of them are specification documents. Specs typically have titles like *_SPEC.md, contain sections such as "Acceptance Criteria", "Implementation Plan", "Design", or "Architecture", or describe features/behaviors to be built.

If the PR contains a spec document:

  1. Read the spec thoroughly and identify its acceptance criteria, design constraints, and expected behaviors.
  2. Cross-reference the spec against the code changes in the PR. Assess whether the implementation is faithful and complete relative to the spec.
  3. Flag any gaps: acceptance criteria not addressed, behaviors described in the spec but missing from the code, or code that contradicts the spec.
  4. Flag scope creep: code changes that go significantly beyond what the spec describes without justification.

If the PR modifies an existing spec, check whether the code already in the PR (or referenced by it) still aligns with the updated spec.

Correctness

  • Look for logic errors, off-by-one mistakes, race conditions, and unhandled edge cases.
  • Verify error handling: errors should not be silently dropped. Check that errors are wrapped with context (fmt.Errorf("doing X: %w", err)).
  • Watch for the Go nil-interface gotcha: a concrete nil pointer assigned to an interface is non-nil. We use reflect.ValueOf(e).IsNil() in places where this matters (see isExecutorUsable()).
  • LocalExec.Run() returns err == nil even for non-zero exit codes. Always check result.ExitCode rather than relying on err != nil.
  • Verify that any bare type assertion (x.(T)) is justified. We prefer SafeAssert (a generics-based helper) for safety and clarity — see AGENTS.md section 2.

Read the full file on GitHub · 64 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 3d ago First seen · 64 lines · 952 tokens per session scan A 81cfe72b3bb8

Subscribe to this mod's changes

maestro copilot-instructions.md is an instructions file published in the GitHub repository SnapdragonPartners/maestro (24 stars, last pushed 15d ago), licensed MIT. It adds 952 tokens to every session, about $0.0048 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.