How real projects brief GitHub Copilot, from .github/copilot-instructions.md.
prefrontal-systemsCopilot instructionsprefrontal-systems/cortexgraph/.github/copilot-instructions.md
Done" --json` 6. **Sync**: `bd sync` (flushes changes to git immediately) ### Priorities - `0` - Critical (security, data loss, broken builds) - `1` - High (major features, important bugs) - `2` - Medium (default, nice
BinaryMeadowCopilot instructionsBinaryMeadow/gridwatch/.github/copilot-instructions.md
name` and `description`. The agent ID is derived from the filename (e.g., `security-reviewer.agent.md` → `security-reviewer`). **Session linking:** Sessions are linked to custom agents by matching `agent_type` values extracted from
mintesnot-teshomeCopilot instructionsmintesnot-teshome/llm-verify/.github/copilot-instructions.md
identity - Web dashboard to visualize results - CLI for running benchmarks in CI/CD --- ## 🚨 HARD RULES ### Security - ❌ **NEVER** commit secrets, API keys, or tokens to code or config files - ✅ Use `.env` files
VaizCopilot instructionsVaiz/rust-mcp-server/.github/copilot-instructions.md
verification 7. **Check unused dependencies**: Use `#cargo-machete` to identify unused dependencies 8. **Verify security compliance**: Use `#cargo-deny-check` to ensure security and licensing compliance ### 3. Dependency Management - When
MicrosoftCopilot instructionsmicrosoft/SdnDiagnostics/.github/copilot-instructions.md
load into `$Global:PesterOfflineTests.SdnApiResources`. **Running:** Build the module first (`.\build.ps1`), then `.\tests\offline\RunTests.ps1` ## Security Best Practices - Never log credentials or secrets - Use SecureString for password parameters - Validate user input
nirholasCopilot instructionsnirholas/bnbchain-mcp/.github/copilot-instructions.md
trading, DEX swaps, smart contract deployment, token operations, staking, bridging, wallet automation, honeypot detection, security analysis, price oracles, market data & protocol analytics on BSC and opBNB ### Terminal Management - **Always
tosin2013Copilot instructionstosin2013/mcp-adr-analysis-server/.github/copilot-instructions.md
dist/ npm run dev # Development server with tsx hot-reload make ci # Full pipeline: security, lint, test, build ``` ### Testing Strategy ```bash npm test # All tests with Vitest npm run test
chrisgleissnerCopilot instructionschrisgleissner/c64bridge/.github/copilot-instructions.md
compiled files stay under `dist/` only; never commit generated artifacts outside `dist/` or `documents`. - **Security**: never commit secrets or credentials; validate all inputs; follow principle of least privilege. ## Commit Messages
possible055Copilot instructionspossible055/relace-mcp/.github/copilot-instructions.md
should be used when the code defines a public API, involves I/O, networking, or security-sensitive behavior, or contains sufficiently complex logic to warrant explanation. All docstrings must follow Google
blundergoatCopilot instructionsblundergoat/goat-flow/.github/copilot-instructions.md
Treat `.github/actions/**`, `.github/hooks/hooks.json`, `.goat-flow/hooks/deny-dangerous.sh`, `.goat-flow/hooks/deny-dangerous/**`, `.github/skills/**`, `.github/copilot-instructions.md`, and `.copilotignore` as security-sensitive runtime surfaces; verify after touching them. `.github/agents/` remains out of scope unless a concrete
dynatrace-ossCopilot instructionsdynatrace-oss/dynatrace-managed-mcp/.github/copilot-instructions.md
client │ ├── logs-api.ts # Logs API client │ ├── metrics-api.ts # Metrics API client │ ├── events-api.ts # Events API client │ ├── security-api.ts # Security problems API client │ ├── slo-api.ts # SLO API client │ └── __tests__/*.test.ts # Capability unit tests ├── utils/ │ ├── logger.ts # Winston
MicrosoftCopilot instructionsmicrosoft/powerbi-visuals-mekkochart/.github/copilot-instructions.md
presence & schema sanity of `capabilities.json`, `pbiviz.json`, `package.json`, `tsconfig.json`, `src/visual.ts`; no `WebAccess`; version bump rules. - **Security & forbidden patterns**: unsafe DOM, dynamic scripts, timers-with-strings, `eval/new Function`, network APIs, unsafe bindings
MicrosoftCopilot instructionsmicrosoft/trident/.github/copilot-instructions.md
closed. ### What to focus on (in priority order) 1. Correctness and logic bugs 2. Security issues (input validation, authz/authn, secrets, injection) 3. Performance regressions (hot paths only) 4. API/contract changes
MicrosoftCopilot instructionsmicrosoft/vscode-documentdb/.github/copilot-instructions.md
YourCommandWizardContext.ts # Wizard state interface ├── PromptXStep.ts # User input steps ├── ExecuteStep.ts # Final execution └── yourCommand.ts # Main orchestration ``` ## Security - Never log passwords, tokens, or connection strings - Use VS Code's secure storage for credentials
TechopolisCopilot instructionsTechopolis/swift-agents/.github/copilot-instructions.md
code without concurrency-specialist review 5. Do NOT handle credentials or encryption without swift-security-specialist review 6. Do NOT submit to App Store without app-review-guardian review
chrisreddingtonCopilot instructionschrisreddington/turn-based-game-mcp/.github/copilot-instructions.md
default: `http://localhost:3000`) - `GAMES_DB_PATH` - SQLite database location (default: `./games.db`) ## Security Considerations - Never hardcode credentials or API keys - Validate all user inputs in API routes - Sanitize game
JeremyDev87Copilot instructionsJeremyDev87/codingbuddy/.github/copilot-instructions.md
Copilot Code Review Instructions ## Review Priority Levels - **🔴 CRITICAL (Block merge)**: Security vulnerabilities, logic errors, breaking changes, data loss risks - **🟡 IMPORTANT (Requires discussion)**: Code quality issues, missing tests, performance bottlenecks, architectural
erevusobolusCopilot instructionserevusobolus/THERION-SYSTEM/.github/copilot-instructions.md
list NOW. [7] TYPE SAFETY -- No any (TS). Full type hints (Python) [8] SECURITY FIRST -- OWASP Top 10. Validate inputs. Protect secrets [9] ZERO VERBOSITY -- Every token = payload. No filler
NVIDIACopilot instructionsNVIDIA/holodeck/.github/copilot-instructions.md
kubernetes: install: true Installer: kubeadm ``` ### Providers - **AWS Provider** (`pkg/provider/aws/`): Creates EC2 instances with proper security groups, key pairs, and GPU support. - **SSH Provider**: Uses existing instances accessible via SSH. ### Provisioner
dhruvanbhalaraCopilot instructionsdhruvanbhalara/skills/.github/copilot-instructions.md
target branch, then summarize the changes under clear categories (Added, Changed, Fixed, Removed). ## Security - **Sensitive Data**: Use `flutter_secure_storage` for tokens and secrets. NEVER use `SharedPreferences` or source code
Repository-wide instructions for GitHub Copilot, kept in .github/copilot-instructions.md.
How to build and test, the project's structure, and the conventions Copilot should follow in suggestions and reviews.
No. Copilot's coding agent also reads AGENTS.md, so many projects keep the shared rules there.
Open a file to see its discussion. Reports from people and their agents are coming.
