AgentMaster: Instructions file for GitHub Copilot

.github/copilot-instructions.md

AgentMaster copilot-instructions.md is an instructions file for GitHub Copilot from Surya8991/AgentMaster. It costs 14,679 tokens per session, scanned B, original, MIT.

A set of instructions for AgentMaster, a coordinator that chooses which installed coding skills to use for a task. It also describes session setup and background updates.

In plain words
What is it for?
It is for routing development, security, database, CI/CD, AI-app, and whole-codebase analysis tasks, as well as discovering available skills.
Why use it?
It helps direct unclear or multi-part requests to suitable tools and workflows without manually choosing among many skills.

Instructions file for GitHub Copilot

Written for GitHub Copilot: a Copilot instructions file. Also seen: reads .claude/ paths; mentions CLAUDE.md; mentions subagents.

This is Surya8991/AgentMaster's own configuration. It tells GitHub Copilot how to work on AgentMaster itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything AgentMaster configures →

Reuse

Borrowing it

Nothing to install: this file belongs to Surya8991/AgentMaster. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/Surya8991/AgentMaster/main/.github/copilot-instructions.md
Clone the repo
git clone --depth 1 https://github.com/Surya8991/AgentMaster

Made for: GitHub Copilot.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for AgentMaster copilot-instructions.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/surya8991/agentmaster/copilot-instructions/github.svg)](https://agentmods.dev/instructions/surya8991/agentmaster/copilot-instructions)
Your own site
<a href="https://agentmods.dev/instructions/surya8991/agentmaster/copilot-instructions"><img src="https://agentmods.dev/badge/instructions/surya8991/agentmaster/copilot-instructions/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for AgentMaster copilot-instructions.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/surya8991/agentmaster/copilot-instructions"><img src="https://agentmods.dev/badge/instructions/surya8991/agentmaster/copilot-instructions.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 14,679 This file is loaded in full into every session.
When invoked 14,679 The same file — it is already loaded in full.
Security scan B 3 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.14679 $0.14679
Opus 5.5 $0.05872 $0.05872
Sonnet 5.5 $0.02936 $0.02936
Haiku 4.5 $0.01468 $0.01468

Measured 8d ago against content hash c1492e086a3b, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade B, and why

AgentMaster copilot-instructions.md scanned grade B with 3 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Reads agent configuration directoriesmediumAgent snooping

.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.

3. **Reach the long tail (two tiers, in order):** first consult the **Extended Skill Clusters** table above — it names the high-value installed skills by cluster and is always in context. If nothing there fits, read `~/.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

curl -I https://your-site.com | grep -i "strict\|content-security\|x-frame\|x-content-type\|referrer"

Runs shell commandslowCapability

Expected in a hook, worth knowing in a rule or an instructions file.

- [ ] No `eval()`, `Function()`, or `child_process.exec()` with user input
.github/copilot-instructions.md · 950 lines

How it starts

The opening of the file, as written. The whole thing — 950 lines — stays where its author put it; the contents beside it link to each section on GitHub.

agent-master

Meta-orchestrator that classifies tasks and routes to the right combination of installed skills across caveman (output compression), superpowers (dev workflow), anthropic-skills (business/domain expertise), and wired tactical libraries (wshobson, davila7, impeccable, anthropic-official, rea). 27 routing categories including whole-codebase analysis via repomix-pack, LLM/AI app dev, reverse-engineering/binary analysis via REA + ida-pro-mcp, live DAP debugging (debug-skill), an optional opt-in scientific-skills library (K-Dense, bio/chem/med), a live task dashboard, meta skill discovery, and curated tactical skill libraries (wshobson, davila7) for backend/security/CI-CD/database depth. Also scaffolds the canonical project-doc spine (README/AGENTS.md/CLAUDE.md/PROJECTLOG.md) in new projects via /agent-master scaffold. Invoke with /agent-master. Use as default entry point for ambiguous or multi-domain requests.

AgentMaster — Meta-Orchestrator

You are AgentMaster. You classify the user's task and route to the right combination of installed skills. You do NOT replace skills — you coordinate them.

ARGUMENTS: {{ARGUMENTS}}

Auto-Update (Run Once Per Session)

On first invocation each session, run the update script in the background (do not block the user):

# Run in background — do NOT wait for completion
bash ~/.claude/.agentmaster-cache/agent-master/scripts/update.sh --quiet &

If the cache directory doesn't exist yet, skip the update silently — the install script will set it up.

This pulls latest versions of all dependency repos (caveman, superpowers, claude-skills, claude-mem, impeccable, anthropic-official, wshobson, davila7) and AgentMaster itself. Has a 6-hour cooldown so it won't re-run repeatedly.

Per-Session Bootstrap: Repomix Snapshot

On the first invocation each session AND when the current working directory looks like a code repo (presence of .git/, package.json, pyproject.toml, Cargo.toml, go.mod, or similar), trigger a repomix snapshot so downstream skills can read whole-codebase context cheaply.

Read the full file on GitHub · 950 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 8d ago Changed · +11 lines · +908 tokens per session c1492e086a3b
  2. 1mo ago Changed · +64 lines · +1,853 tokens per session scan A → B 6c266bc896a7
  3. 1mo ago First seen · 875 lines · 11,918 tokens per session scan A e1d833b15128

Subscribe to this mod's changes

AgentMaster copilot-instructions.md is an instructions file published in the GitHub repository Surya8991/AgentMaster (2 stars, last pushed 9d ago), licensed MIT. It adds 14,679 tokens to every session, about $0.0587 per session on Opus 5.5. A static security scan graded it B with 3 findings (reads agent configuration directories, makes network calls, runs shell commands). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other instructions, from other repositories