Copilot instructions examples

AvdLeeCopilot instructions

SwiftUI-Agent-Skill

AvdLee/SwiftUI-Agent-Skill/.github/copilot-instructions.md

correct. - iOS 26+ / Liquid Glass guidance includes **availability gating** and sensible fallbacks. 5. **Safety / Security (for automation & scripts)** - GitHub Actions and scripts should avoid surprising network behavior and avoid writing

neomuttCopilot instructions

neomutt

neomutt/neomutt/.github/copilot-instructions.md

macros } ``` ### Fuzz Testing NeoMutt supports fuzz testing using LLVM's LibFuzzer. Fuzzing helps find security vulnerabilities and bugs by testing parsing functions with randomly generated inputs. #### Current Fuzz Targets

MicrosoftCopilot instructions

kiota

microsoft/kiota/.github/copilot-instructions.md

work complete. 6. Prefer non-destructive actions and do not revert unrelated local changes. ## Security review defaults When modifying code generation or writer/refiner logic, treat schema-derived values as untrusted

domoticzCopilot instructions

domoticz

domoticz/domoticz/.github/copilot-instructions.md

build uses C++17 standard with compiler-specific flags (e.g., `-rdynamic` for GCC). ## Security Considerations - **Authentication:** Default credentials are admin/domoticz - must be changed - **Security Issues:** Report to security@domoticz.com (not GitHub

bytebaseCopilot instructions

dbhub

bytebase/dbhub/.github/copilot-instructions.md

Database Access This project provides an MCP server (DBHub) for secure SQL access to the development database. AI agents can execute SQL queries. In read-only mode (recommended for production

No other project uses it yet

PaddlePaddleCopilot instructions

FastDeploy

PaddlePaddle/FastDeploy/.github/copilot-instructions.md

GitHub Copilot Custom Review Instructions When reviewing code, focus on: ## Security Critical Issues - Check for hardcoded secrets, API keys, or credentials - Look for SQL injection and XSS vulnerabilities - Verify proper

MicrosoftReads credentialsCopilot instructions

azure-pipelines-tasks

microsoft/azure-pipelines-tasks/.github/copilot-instructions.md

Defined" → Select "Environment (Read & Write)" OR "Full Access" 5. Copy and save the token securely #### Upload Task **Method 1: Interactive Login** ```bash # Login to Azure DevOps tfx login # Enter Service

dragonflyossPipes a download into a shellCopilot instructions

dragonfly

dragonflyoss/dragonfly/.github/copilot-instructions.md

here. ## Project Overview Dragonfly is a **CNCF Graduated** project that delivers efficient, stable, and secure data distribution and acceleration powered by P2P technology. It provides an optional content-addressable filesystem

apacheCopilot instructions

gravitino

apache/gravitino/.github/copilot-instructions.md

imports; close resources (try-with-resources); do not leave TODO/FIXME without an issue reference. - **Security**: No hardcoded secrets; validate external inputs; prevent injection/path traversal/SSRF where applicable; do not log sensitive

music-assistantCopilot instructions

server

music-assistant/server/.github/copilot-instructions.md

into an error. ## What to review Correctness and bugs, blocking IO in async code, security, performance, test coverage, docs the change makes wrong, and consistency with the surrounding code. `AGENTS.md

No other project uses it yet

InvoicePlaneReads credentialsCopilot instructions

InvoicePlane

InvoicePlane/InvoicePlane/.github/copilot-instructions.md

Guest_Controller`). - All user output in views must go through `html_escape()` or `htmlsc()`. ## Security requirements - **Never** use `$_SERVER['HTTP_REFERER']` directly for redirects — use `get_safe_referer()`. - **Never** scan

No other project uses it yet

vitodeployCopilot instructions

vito

vitodeploy/vito/.github/copilot-instructions.md

gate alone. ## Topic-specific guidelines See `.github/instructions/` for detailed standards on PHP/Laravel, frontend, security, and architecture tests

MicrosoftCopilot instructions

litebox

microsoft/litebox/.github/copilot-instructions.md

This repository contains a Rust-based, security-focused sandboxing library OS. To maintain high code quality and consistency, please adhere to the following guidelines when contributing. ## Code Standards ### Required Before

MicrosoftCopilot instructions

Generative-AI-for-beginners-dotnet

microsoft/Generative-AI-for-beginners-dotnet/.github/copilot-instructions.md

docs where helpful - For AI integrations (Azure OpenAI, Ollama, etc.), follow official SDK and security guidelines ## Project-Specific Conventions - All lessons include a short video, code sample, and step

lammpsCopilot instructions

lammps

lammps/lammps/.github/copilot-instructions.md

unstable`. ## General Conventions - **7-bit US-ASCII everywhere** (sources, docs, scripts); Unicode is forbidden (security policy) and fails CI. - **User-facing text** (error messages, docs) must avoid computer-science jargon

MicrosoftCopilot instructions

mxc

microsoft/mxc/.github/copilot-instructions.md

fails on any reflection-dependent path. See [`docs/development/build-and-test/schema-codegen.md`](../docs/development/build-and-test/schema-codegen.md) for regeneration commands. ## Error and security behavior - Surface errors explicitly using repository error types and include actionable context. - Preserve panic containment

No other project uses it yet

inspecCopilot instructions

inspec

inspec/inspec/.github/copilot-instructions.md

testing framework written in Ruby. It provides a domain-specific language (DSL) for describing security and compliance rules that can be shared between software engineers, operations, and security engineers. ## Additional

stacks-networkCopilot instructions

stacks-core

stacks-network/stacks-core/.github/copilot-instructions.md

exposed by the PR. This repository implements the Stacks blockchain. Prioritize correctness, consensus safety, security, operational safety, and compatibility over general maintainability or style feedback. Path-specific guidance under `.github/instructions

No other project uses it yet

visaReads credentialsCopilot instructions

visa-vulnerability-agentic-harness

visa/visa-vulnerability-agentic-harness/.github/copilot-instructions.md

GitHub Copilot instructions This repo is **vvaharness**, a released CLI security-scanning product. The full agent operating manual is in `AGENTS.md` at the repo root — follow it. Do NOT modify

filecoin-projectCopilot instructions

lotus

filecoin-project/lotus/.github/copilot-instructions.md

network-version gates and errors around tipsets, null rounds, deferred execution or reorgs. 2. Security and denial-of-service problems at RPC, gateway, chain-exchange and other untrusted-input boundaries