.github/skills/markdown-customizations/SKILL.md
Use this skill when creating or editing GitHub Copilot customization Markdown files (agent profiles, prompt files, instruction files, and skills).
npx skillsauth add robotti-io/copilot-security-instructions markdown-customizationsInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Help create and maintain Copilot customization files with correct structure and consistent, high-signal instructions.
Use this skill when working on any of:
agents/*.agent.mdprompts/*.prompt.mdinstructions/*.instructions.mdskills/**/SKILL.md# Title## Purpose## How to use## Rules (MUST/SHOULD/MAY)## Examples (at least one when ambiguity is likely).instructions.md files.copilot-instructions.md.description in agent profiles”).yaml or md tags.skill.md; the file must be named SKILL.md.---
name: my-agent
description: Short description of what this agent does
tools: ["read", "search", "edit"]
---
---
applyTo: ".github/prompts/**/*.prompt.md"
excludeAgent: "code-review"
---
---
agent: "agent"
description: "One-line description of what this prompt does"
---
tools
Threat model a system, feature, service, or PR using Shostack's 4Q workflow, evidence-first analysis, risk scoring, and CLI-friendly Mermaid helper scripts.
testing
Analyze repository-grounded identity, access control, and authorization design with evidence-first reporting and script-validated Mermaid diagrams.
tools
Threat model a system, feature, service, or PR using Shostack's 4Q workflow, evidence-first analysis, risk scoring, and CLI-friendly Mermaid helper scripts.
content-media
Triage a dependency CVE using local repo evidence and remediation guidance.