Borrowing it
Nothing to install: this file belongs to zexion7873/copilot-setting. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/zexion7873/copilot-setting/main/.github/instructions/jsp.instructions.mdgit clone --depth 1 https://github.com/zexion7873/copilot-settingWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/zexion7873/copilot-setting/jsp)<a href="https://agentmods.dev/instructions/zexion7873/copilot-setting/jsp"><img src="https://agentmods.dev/badge/instructions/zexion7873/copilot-setting/jsp/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/instructions/zexion7873/copilot-setting/jsp"><img src="https://agentmods.dev/badge/instructions/zexion7873/copilot-setting/jsp.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00471 | $0.00471 |
| Opus 5.5 | $0.00188 | $0.00188 |
| Sonnet 5.5 | $0.00094 | $0.00094 |
| Haiku 4.5 | $0.00047 | $0.00047 |
Grade A, and why
copilot-setting jsp.instructions.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
JSP Conventions
Output Encoding
- Every dynamic value:
<c:out value="${...}"/>orfn:escapeXml()— no raw${...}in HTML - Attribute context requires a double-quoted attribute — escaping cannot stop unquoted-attribute breakout
- Never put
${...}in an inline event handler (onclick) orjavascript:URL — escaping cannot make these safe; pass via an HTML-escapeddata-*attribute and read it from JS - JS context: JSON-encode server-side with
<escaped as\u003c, or pass via adata-*attribute - URL context:
<c:url>with<c:param>
JSTL Only
- No scriptlets (
<% ... %>); no<%= ... %>— use<c:out> - Logic:
<c:if>,<c:choose>,<c:forEach>; formatting:<fmt:formatDate>,<fmt:formatNumber> <fmt:formatDate value="${...}"/>takes ajava.util.Dateonly — JSTL 1.2 predatesjava.time, so aLocalDateTimereaching it fails at render. Convert at the service boundary, never in the view (instructions/java.instructions.md)
Includes
<jsp:include>for dynamic;<%@ include %>for static; never include user-supplied paths
Data Preparation
- JSP must NOT trigger lazy loading — prepare all data in the controller/service before forwarding (
instructions/spring-hibernate.instructions.md); a lazy-collection hit in a JSP means the service missed an eager fetch — fix the service, not the JSP
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago Changed · +1 lines · +83 tokens per session cedf0a3de3c5
- 1mo ago Changed · -10 lines · -168 tokens per session 7f60db84f0a0
- 2mo ago First seen · 38 lines · 556 tokens per session scan A 63fe08970ae9
copilot-setting jsp.instructions.md is an instructions file published in the GitHub repository zexion7873/copilot-setting (1 stars, last pushed 1mo ago), licensed MIT. It adds 471 tokens to every session, about $0.0019 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
copilot-setting jsp.instructions.md compared with instructions from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| copilot-setting jsp.instructions.mdzexion7873/copilot-setting | Instructions file | 1 | 1mo ago | MIT | A | 471 | GitHub Copilot |
| ai-agent-rules-generator copilot.instructions.mdsavedpixel/ai-agent-rules-generator | Instructions file | 8 | 6mo ago | MIT | A | 3,431 | GitHub Copilot |
| ai-agent-rules-generator agent-observations.instructions.mdsavedpixel/ai-agent-rules-generator | Instructions file | 8 | 6mo ago | MIT | A | 1,787 | GitHub Copilot |
| ai-agent-rules-generator task.instructions.mdsavedpixel/ai-agent-rules-generator | Instructions file | 8 | 6mo ago | MIT | A | 1,703 | GitHub Copilot |
| ai-agent-rules-generator doc-sync.instructions.mdsavedpixel/ai-agent-rules-generator | Instructions file | 8 | 6mo ago | MIT | A | 1,652 | GitHub Copilot |
| ai-agent-rules-generator browsetools.instructions.mdsavedpixel/ai-agent-rules-generator | Instructions file | 8 | 6mo ago | MIT | A | 490 | GitHub Copilot |
| ai-agent-rules-generator devtools.instructions.mdsavedpixel/ai-agent-rules-generator | Instructions file | 8 | 6mo ago | MIT | A | 399 | GitHub Copilot |