✨ A customizable copilot-instructions.md ruleset & prompts to guide GitHub Copilot toward secure coding defaults in Java, Node.js, C# and Python. Blocks risky patterns, teaches safe habits.
Robotti-io/copilot-security-instructions
Skill Claude CodeCodex
Use this skill when creating or editing GitHub Copilot customization Markdown files (agent profiles, prompt files, instruction files, and skills).
Robotti-io/copilot-security-instructions
Skill Claude CodeCodex
Analyze repository-grounded identity, access control, and authorization design with evidence-first reporting and script-validated Mermaid diagrams.
Robotti-io/copilot-security-instructions
Skill Claude CodeCodex
Triage a dependency CVE using local repo evidence and remediation guidance.
Robotti-io/copilot-security-instructions
Skill Claude CodeCodex
Threat model a system, feature, service, or PR using Shostack's 4Q workflow, evidence-first analysis, risk scoring, and CLI-friendly Mermaid helper scripts.
Robotti-io/copilot-security-instructions
Skill Claude CodeCodex
Review workflow for AI/LLM output usage to prevent over-trust, injection, and unsafe automation.
Robotti-io/copilot-security-instructions
Skill Claude CodeCodex
Process for tightening input validation, canonicalization, and safe parsing to prevent injection and logic abuse.
Robotti-io/copilot-security-instructions
Skill Claude CodeCodex
Workflow for preventing secret leaks and sensitive logging (PII/credentials) and adding redaction defaults.
Robotti-io/copilot-security-instructions
Skill Claude CodeCodex
Repeatable process for an application security code review that produces prioritized findings and fix guidance.
Robotti-io/copilot-security-instructions
Skill Claude CodeCodex
Standard validation checklist to prove a security fix works and doesn’t regress behavior.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: