ask-copilot

ask-copilot is a skill for Claude Code, Codex from sickn33/agentic-awesome-skills. It costs 30 tokens per session (1,384 once invoked), scanned A, original, MIT.

A controlled interface for asking GitHub Copilot CLI for code explanations, reviews, second opinions, or snippets without interactive terminal use.

In plain words
What is it for?
Use it when a user wants Copilot to review code, explain an implementation, or generate a code snippet.
Why use it?
It prevents accidental sharing of local files or repository data by requiring the user to explicitly request Copilot and consent before those contents are sent to the external service.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one.

Part of the agentic-awesome-skills plugin — 196 skills shipped together

Good fit Use it when a user wants Copilot to review code, explain an implementation, or generate a code snippet.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/sickn33/agentic-awesome-skills/ask-copilot
About the project

AAS Core is a local control plane for coding agents that lets them search a large catalogue of skills, choose a stack, validate it, and create a reproducible plan. It is used to assemble and review agent workflows through its CLI, local MCP server, catalogue, plugins, and Workbench. The catalogue add-ons provide the skills, plugins, bundles, and workflows that AAS Core helps agents select and validate.

sickn33/agentic-awesome-skills · 46,184 stars · on GitHub · sickn33.github.io

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add sickn33/agentic-awesome-skills --skill ask-copilot
Clone the repo
git clone --depth 1 https://github.com/sickn33/agentic-awesome-skills

Made for: Claude Code, Codex.

Or install agentic-awesome-skills, the plugin that ships this one along with the rest of its 196 skills.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for ask-copilot

README.md
[![agentmods](https://agentmods.dev/badge/skills/sickn33/agentic-awesome-skills/ask-copilot/github.svg)](https://agentmods.dev/skills/sickn33/agentic-awesome-skills/ask-copilot)
Your own site
<a href="https://agentmods.dev/skills/sickn33/agentic-awesome-skills/ask-copilot"><img src="https://agentmods.dev/badge/skills/sickn33/agentic-awesome-skills/ask-copilot/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for ask-copilot

Your own site · 80×15
<a href="https://agentmods.dev/skills/sickn33/agentic-awesome-skills/ask-copilot"><img src="https://agentmods.dev/badge/skills/sickn33/agentic-awesome-skills/ask-copilot.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 30 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,384 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • Snyk pass 7 Sept 2026
  • NVIDIA SkillSpector pass 7 Sept 2026
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00030 $0.01384
Opus 5 $0.00015 $0.00692
Sonnet 5 $0.00006 $0.00277
Haiku 4.5 $0.00003 $0.00138

Measured 4d ago against content hash 5daa95975cce, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-09, from the pricing page.

Security

Grade A, and why

ask-copilot scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Origin

Copies of this mod

4 near-identical copies found in the catalogue:

plugins/agentic-awesome-skills-claude/skills/ask-copilot/SKILL.md · 113 lines

How it starts

The opening of the file, as written. The whole thing — 113 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Ask Copilot

Overview

This skill allows the agent to interact with GitHub Copilot CLI (copilot) in a non-interactive (headless) mode. Use this skill when the user explicitly wants secondary advice, code reviews, explanations, or code generation from GitHub Copilot's models.

Use source: self and source_type: self when the skill is original to this repository and does not require README external-source credit.

Copilot is an external service. Treat prompts, file paths, snippets, repository content, command output, and generated suggestions as data that may leave the local environment.

When to Use This Skill

  • User Request Only: Use this skill ONLY when the user explicitly asks to "consult Copilot", "ask Copilot", "review with Copilot", or explicitly requests a second opinion using Copilot.
  • Do NOT Invoke Automatically: To comply with privacy policies, the agent must not invoke this skill automatically for its own second opinions or checks without explicit user consent.

How It Works

Step 1: Request Explicit User Consent

Before executing any command that references local files, repository paths, snippets, command output, secrets-adjacent config, or private project context, you MUST obtain explicit user consent to send that material to GitHub Copilot.

Ask for separate approval before allowing Copilot to run tools, execute shell commands, edit files, install packages, or mutate the workspace.

Step 2: Execute with Minimal Permitted Flags

To prevent TUI lockups, execute the copilot command with headless flags. Do not use blanket bypasses such as --yolo, --allow-all-tools, or --allow-all-paths for routine Q&A or review.

  • For Read-Only / General Q&A: Send only the user-approved, redacted text in the prompt. Do not grant Copilot broad local-path access; it is not needed when the prompt already contains the approved context.
  • For Trusted Mutation Tasks: Prefer a scoped permission flag if the CLI supports one. Use blanket mutation bypasses only after the user explicitly authorizes Copilot to execute tools and mutate the workspace for the specific task.

Read the full file on GitHub · 113 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 4d ago First seen · 113 lines · 30 tokens per session scan A 5daa95975cce

Subscribe to this mod's changes

ask-copilot is a skill published in the GitHub repository sickn33/agentic-awesome-skills (46,184 stars, last pushed yesterday), licensed MIT. It adds 30 tokens to every session and 1,384 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-05.