Borrowing it
Nothing to install: this file belongs to zexion7873/copilot-setting. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/zexion7873/copilot-setting/main/.github/instructions/security.instructions.mdgit clone --depth 1 https://github.com/zexion7873/copilot-settingWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/zexion7873/copilot-setting/security)<a href="https://agentmods.dev/instructions/zexion7873/copilot-setting/security"><img src="https://agentmods.dev/badge/instructions/zexion7873/copilot-setting/security/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/instructions/zexion7873/copilot-setting/security"><img src="https://agentmods.dev/badge/instructions/zexion7873/copilot-setting/security.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.01095 | $0.01095 |
| Opus 5.5 | $0.00438 | $0.00438 |
| Sonnet 5.5 | $0.00219 | $0.00219 |
| Haiku 4.5 | $0.00110 | $0.00110 |
Grade B, and why
copilot-setting security.instructions.md scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Cloud metadata endpointmediumServer-side request forgery
One request to 169.254.169.254 can return temporary IAM credentials.
- Block private IP ranges, loopback, and link-local (`10.0.0.0/8`, `172.16.0.0/12`, `192.168.0.0/16`, `127.0.0.0/8`, `169.254.0.0/16` — link-local, covers the `169.254.169.254` cloud-metadata endpoint; IPv6 `::1` and `fc Downgraded: this mod is about security review, or the phrase is quoted, so it is likely naming the pattern rather than instructing it.
How it starts
The opening of the file, as written. The whole thing — 67 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Security Rules
Secure by default. State what risk is mitigated when writing security code. SQL injection: instructions/sql.instructions.md. XSS: instructions/jsp.instructions.md.
A01 Broken Access Control
- Deny by default; explicitly check rights per resource
- Authentication ≠ authorization: a logged-in user still needs an explicit role/permission check per endpoint — "logged in" never means "allowed"
- Allow-list for user-supplied URLs/paths; prevent path traversal
- CSRF: all state-changing POST forms must carry a CSRF token; Spring Security 3.2: configure
<csrf>in security namespace; without Spring Security: manual double-submit cookie or synchronizer token - State-changing operations via POST/PUT/DELETE only — never GET; restrict handlers with
@RequestMapping(method = ...)(a mapping withoutmethodmatches every verb and bypasses POST-form CSRF tokens)
A02 Cryptographic Failures
- Passwords: bcrypt (
BCryptPasswordEncoder, built-in to Spring Security crypto since 3.1, present in 3.2) or Argon2 (needs argon2-jvm — no native SS 3.2 encoder); never MD5/SHA-1. Data at rest: AES-256; transit: HTTPS - No hardcoded secrets — env vars or secret store
A03 Injection
- SQL:
PreparedStatementwith?only - OS command:
ProcessBuilderwith an argument list — neverRuntime.exec(String)orsh -cwith user input; no shell-string concatenation - XSS:
<c:out>in JSP; context-aware encoding - XXE: disable DTDs and external entities on every XML parser, using each API's own switch (they differ —
setFeature/disallow-doctype-declexists only on the first pair); critical in this XML-heavy stack:DocumentBuilderFactory/SAXParserFactory:setFeature("http://apache.org/xml/features/disallow-doctype-decl", true)plusFEATURE_SECURE_PROCESSINGXMLInputFactory(StAX):setProperty(XMLInputFactory.SUPPORT_DTD, false)andsetProperty("javax.xml.stream.isSupportingExternalEntities", false)— it has nosetFeature- JAXB
Unmarshaller: no DTD switch of its own — unmarshal via aSAXSourcewrapping a hardenedXMLReaderconfigured as above
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago Changed · +14 tokens per session 392e828ab56c
- 1mo ago Changed · -11 lines · -177 tokens per session 5414e272f9bf
- 2mo ago First seen · 78 lines · 1,258 tokens per session scan B c400b2e4d278
copilot-setting security.instructions.md is an instructions file published in the GitHub repository zexion7873/copilot-setting (1 stars, last pushed 1mo ago), licensed MIT. It adds 1,095 tokens to every session, about $0.0044 per session on Opus 5.5. A static security scan graded it B with 1 finding (cloud metadata endpoint). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
copilot-setting security.instructions.md compared with instructions from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| copilot-setting security.instructions.mdzexion7873/copilot-setting | Instructions file | 1 | 1mo ago | MIT | B | 1,095 | GitHub Copilot |
| ai-agent-rules-generator copilot.instructions.mdsavedpixel/ai-agent-rules-generator | Instructions file | 8 | 6mo ago | MIT | A | 3,431 | GitHub Copilot |
| ai-agent-rules-generator agent-observations.instructions.mdsavedpixel/ai-agent-rules-generator | Instructions file | 8 | 6mo ago | MIT | A | 1,787 | GitHub Copilot |
| ai-agent-rules-generator task.instructions.mdsavedpixel/ai-agent-rules-generator | Instructions file | 8 | 6mo ago | MIT | A | 1,703 | GitHub Copilot |
| ai-agent-rules-generator doc-sync.instructions.mdsavedpixel/ai-agent-rules-generator | Instructions file | 8 | 6mo ago | MIT | A | 1,652 | GitHub Copilot |
| ai-agent-rules-generator browsetools.instructions.mdsavedpixel/ai-agent-rules-generator | Instructions file | 8 | 6mo ago | MIT | A | 490 | GitHub Copilot |
| ai-agent-rules-generator devtools.instructions.mdsavedpixel/ai-agent-rules-generator | Instructions file | 8 | 6mo ago | MIT | A | 399 | GitHub Copilot |