How real projects brief GitHub Copilot, from .github/copilot-instructions.md.
strausmannCopilot instructionsstrausmann/mcp-dockhand/.github/copilot-instructions.md
tool's implementation differs from upstream, flag it as HIGH priority.** ## Code Review Guidelines ### Security - All path parameters MUST use `encodePath()` from `src/utils/encode-path.ts` - No hardcoded credentials or tokens - Session cookies
Microsoft AzureCopilot instructionsAzure/kars/.github/copilot-instructions.md
Kars — Copilot Instructions ## What is Kars? A secure AI agent runtime on Azure AKS. OpenClaw agents run in isolated K8s sandbox pods with E2E encrypted inter-agent communication (Signal Protocol
ssdeanxCopilot instructionsssdeanx/AgentStack/.github/-/copilot-instructions.md
Copilot/Cursor instructions for working inside the Mastra repo
ssdeanxCopilot instructionsssdeanx/AgentStack/.github/copilot-instructions.md
before any task. - 🚦 Use the Kiro-Lite workflow: PRD → Design → Tasks → Code. - 🔒 Follow security & style rules in `copilot-rules.md`. - 📝 On "/update memory bank", refresh activeContext.md & progress.md. - ✅ Confirm memory bank loaded with
Robotti-ioCopilot instructionsRobotti-io/copilot-security-instructions/copilot-instructions.md
Copilot Secure Defaults for Java, Node.js, C#, and Python Projects These instructions guide GitHub Copilot to suggest secure, intentional code patterns for Java, Node.js, C#, and Python development — especially
jmrplensCopilot instructionsjmrplens/gitlab-mcp-server/.github/copilot-instructions.md
domain), resources, prompts, capabilities/ │ ├── concepts/ # architecture, dynamic tools, meta-tools, error handling, GraphQL, security │ └── development/ # adr/ (Architectural Decision Records), testing/ (generated), static analysis, cmd utilities ├── plan/ # Implementation plans ├── .github/ # Copilot
mcowgerCopilot instructionsmcowger/generic-copilot/.github/copilot-instructions.md
workflow and build commands - Coding conventions and critical rules - Guidelines for adding new features - Security best practices **Quick Reference - Critical Rules:** - 🛑 **NEVER** use `console.log` - ALWAYS use `logger` from `src/outputLogger.ts
putervisionCopilot instructionsputervision/world-model-mcp/.github/copilot-instructions.md
state`: Poll and wait until an entity reaches a specific spatial condition. # Cryptographic Vault & Security (webcrypt-mcp) This project provides native `webcrypt-mcp` tooling for zero-dependency
personamanagmentlayerCopilot instructionspersonamanagmentlayer/pcl/.github/copilot-instructions.md
persona with specialized capabilities - **Team Composition**: `/team [id]` - Load pre-configured teams (e.g., security-review, dream-team, standardization) - **Shared Skills**: Personas inherit foundation, technical, security, architecture, standards, and tools skills
Microsoft AzureCopilot instructionsAzure/ARO-HCP/.github/copilot-instructions.md
identify the reverted commit or PR; otherwise, flag a critical issue. ## Security Review (Mandatory for all PR reviews) When reviewing a PR, these checks are **always blocking** — regardless
digitaraldCopilot instructionsdigitarald/vscode-agent-todos/.github/copilot-instructions.md
proper event subscription before triggering changes 5. Verify storage initialization in test environments ## Security Notes - Never store sensitive data in todo items - Validate input schemas strictly in language model tools
girishrCopilot instructionsgirishr/SpecPilot/.github/copilot-instructions.md
Task type | Read | |---|---| | Session start | `.specs/project/project.yaml` | | Feature / bug | + `project/requirements.md`, `planning/tasks.md` | | Architecture | + `architecture/architecture.md` | | Tests | + `quality/tests.md` | | Security | + `security/threat-model.md`, `security/security-decisions.md` | | Planning | + `planning/tasks.md`, `planning/roadmap.md` | ## Code Philosophy — Write Only What Needed 1. Need exist
padmarajnidagundiCopilot instructionspadmarajnidagundi/Playwright-AI-Agent-POM-MCP-Server/.github/copilot-instructions.md
architecture summary - Tests live under `tests/` and are organized by category (unit-, integration-, performance-, security-, validation-, mock-, interop-). See the `tests/` tree in `README.md`. - Page Objects are in `tests/pages/` (example
MicrosoftCopilot instructionsmicrosoft/Microsoft-Fabric-tools-workload/.github/copilot-instructions.md
autocomplete - `fabric item` - Item creation with intelligent code generation - `fabric auth` - Authentication patterns with secure defaults - `fabric api` - API integration with type inference - `fabric deploy` - Deployment automation with validation ### Enhanced
MicSmCopilot instructionsMicSm/boffin/.github/copilot-instructions.md
never licenses dropping a stage, a trust-boundary validation, data-loss prevention, security, or accessibility. Non-trivial logic leaves one minimal runnable check behind. ## Stage Pipeline Walk stages from
ElasticCopilot instructionselastic/opentelemetry/.github/copilot-instructions.md
correct pages and sections ```markdown For more information, see [Installation guide](/docs/install/README.md). Refer to [Security settings](/docs/security/configuration.md#authentication) for details. ``` #### Link to specific sections - **Use anchor links**: Link to specific
raye-dengCopilot instructionsraye-deng/open-code-review/.github/copilot-instructions.md
usage matches current (2025+) documentation - **Context coherence**: Multi-file changes should be logically consistent - **Security**: Avoid deprecated crypto algorithms, insecure defaults - **Simplicity**: Don't add unnecessary abstraction layers
veritasfuji-japanCopilot instructionsveritasfuji-japan/veritas_os/.github/copilot-instructions.md
Human maintainer approval is the final commit boundary. - Do not independently approve or merge security-sensitive, governance-sensitive, release-sensitive, credential, external-effect, or public-claim changes. - Do not infer
DitriXNewCopilot instructionsDitriXNew/MCP-DB-Client/.github/copilot-instructions.md
tools, resources, and prompts The DLL handles protocol-level concerns (HTTP, JSON-RPC, sessions, security). The BSL module handles business logic (tool handlers, resource data, prompt generation). ## Architecture ``` MCP Client
fluttersdkCopilot instructionsfluttersdk/wind/.github/copilot-instructions.md
land under one of the subsections: `Added`, `Changed`, `Fixed`, `Removed` (BREAKING), `Quality` (test/coverage/CI infra), `Security`. Pick the one closest to user impact, not internal scope. - Format: a bullet opening with
Repository-wide instructions for GitHub Copilot, kept in .github/copilot-instructions.md.
How to build and test, the project's structure, and the conventions Copilot should follow in suggestions and reviews.
No. Copilot's coding agent also reads AGENTS.md, so many projects keep the shared rules there.
Open a file to see its discussion. Reports from people and their agents are coming.
