Commit Graph

1151 Commits

Author SHA1 Message Date
github-actions[bot]
dc8b0cc546 chore: publish from staged [skip ci] 2026-02-22 02:33:39 +00:00
Aaron Powell
329796314a Merge pull request #783 from agreaves-ms/fix/marketplace-plugin-source
fix: update plugin source paths in marketplace.json generation
2026-02-22 13:33:19 +11:00
Allen Greaves
6951523c6e fix: update plugin source paths in marketplace.json generation 2026-02-20 14:44:09 -08:00
Aaron Powell
7bebd4a385 Merge pull request #745 from codeHysteria28/add-copilot-usage-metrics-skill
Add copilot-usage-metrics skill
2026-02-20 15:46:56 +11:00
Aaron Powell
4dfcb55937 Fixing the readme 2026-02-20 15:45:55 +11:00
Aaron Powell
87fb17b7d9 chore: remove materialized plugin files from tracking
These agents/, commands/, and skills/ directories inside plugin folders
are generated by eng/materialize-plugins.mjs during CI publish and
should not be committed to the staged branch.

- Remove 185 materialized files from git tracking
- Add .gitignore rules to prevent accidental re-commits
- Update publish.yml to force-add materialized files despite .gitignore

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-02-20 15:43:09 +11:00
Aaron Powell
8fcf6513cf Merge branch 'main' into add-copilot-usage-metrics-skill 2026-02-19 15:28:42 +11:00
github-actions[bot]
812febf350 chore: publish from staged [skip ci] 2026-02-19 04:11:47 +00:00
Aaron Powell
8ac0e41cb0 Merge pull request #750 from github/plugin-migration
refactor: migrate plugins to Claude Code spec format
2026-02-19 15:11:15 +11:00
Aaron Powell
84b44cab9e Merge pull request #759 from github/agentic-workflows
Add weekly resource staleness report agentic workflow
2026-02-19 15:10:36 +11:00
Aaron Powell
e20084d50f Merge remote-tracking branch 'origin/main' into plugin-migration 2026-02-19 10:54:38 +11:00
Aaron Powell
05ab97934a Add weekly resource staleness report agentic workflow
Scans agents, prompts, instructions, hooks, and skills folders to
identify resources that haven't had a major change in over 30 days
(stale) or 14 days (aging). Runs weekly or on demand and files a
GitHub issue with the report.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-02-19 10:19:17 +11:00
Aaron Powell
f880e1268f Merge pull request #757 from imran-siddique/add-agent-governance-instructions
feat: add agent-safety instructions and governance reviewer agent
2026-02-19 10:15:41 +11:00
Aaron Powell
41b70bca87 Merge pull request #756 from imran-siddique/add-governance-audit-hook
feat: add governance-audit hook — threat detection for Copilot sessions
2026-02-19 10:14:17 +11:00
Aaron Powell
f256cb2ada Merge pull request #755 from imran-siddique/add-agent-governance-skill
feat: add agent-governance skill — governance patterns for AI agent systems
2026-02-19 10:12:30 +11:00
Aaron Powell
8f5f427942 Merge pull request #752 from luizbon/feat/agent-manager
Add VS Code Agent Manager tool with features for managing Copilot agents
2026-02-19 10:10:29 +11:00
Imran Siddique
03290d78d0 fix: add applyTo field to agent-safety instructions frontmatter
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-02-18 14:51:18 -08:00
Imran Siddique
070cb0222e fix: address Copilot PR review comments on agent-governance skill
- Use context manager and path validation for file reading example
- Block directory traversal attacks with os.path.realpath check
- Update terminology: whitelist/blacklist -> allowlist/blocklist

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-02-18 14:50:40 -08:00
Imran Siddique
32d8f7f622 fix: address Copilot PR review comments on governance-audit hook
- Switch from colon to tab delimiter to handle colons in evidence text
- Base64-encode evidence to prevent parsing issues
- Use MAX_SEVERITY in log output and JSON events
- Narrow regex patterns to reduce false positives:
  - third[_-]?party instead of third.?party
  - Role reassignment scoped to AI terms
  - System prompt injection requires 'you are' context
- Fix session-end stats to scope to current session only
- Update privacy statement to clarify evidence snippets are logged
- Rename credential description to 'Possible hardcoded credential'
- Fix database destruction regex to also match semicolons

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-02-18 14:49:17 -08:00
Imran Siddique
da3dbec8b9 Update SKILL.md
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2026-02-18 14:41:52 -08:00
Imran Siddique
8d942f437b Update SKILL.md
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2026-02-18 14:41:40 -08:00
Imran Siddique
33b7464774 feat: add agent-safety instructions and governance reviewer agent
- instructions/agent-safety.instructions.md: Guidelines for building safe,
  governed AI agent systems (tool access controls, content safety,
  multi-agent safety, audit patterns, framework-specific notes)
- agents/agent-governance-reviewer.agent.md: Expert agent that reviews code
  for governance gaps and helps implement policy enforcement

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-02-18 13:30:30 -08:00
Imran Siddique
4a4b9343d5 feat: add governance-audit hook — threat detection for Copilot sessions
Add real-time governance audit hook that scans prompts for threat signals:
- 5 threat categories: data exfiltration, privilege escalation,
  system destruction, prompt injection, credential exposure
- 4 governance levels: open, standard, strict, locked
- Append-only JSON audit trail (logs/copilot/governance/audit.log)
- Session summary with threat counts at session end
- Privacy-aware: logs decisions and metadata, never prompt content

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-02-18 13:29:41 -08:00
Imran Siddique
dcfae78fa4 feat: add agent-governance skill
Add governance patterns and techniques for AI agent systems:
- Policy definition with allowlists, blocklists, and content filters
- Semantic intent classification for threat detection
- Tool-level governance decorator pattern
- Trust scoring with temporal decay for multi-agent systems
- Append-only audit trail design
- Framework integration examples (PydanticAI, CrewAI, OpenAI Agents)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-02-18 13:28:25 -08:00
Luiz Bon
9f43980c68 Merge branch 'main' into feat/agent-manager 2026-02-18 20:28:34 +11:00
Luiz Bon
4025fda170 Add VS Code Agent Manager tool with features for managing Copilot agents 2026-02-18 20:25:44 +11:00
Aaron Powell
f51409f91e ci: add resolution guidance to plugin structure check
Provides two options: rebase onto staged (with exact commands using
the contributor's branch name) or manually remove the files.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-02-18 16:52:40 +11:00
Aaron Powell
fb1b9e164b ci: add workflow to detect materialized files in plugin dirs
Checks PRs targeting staged for agent/command/skill files or symlinks
inside plugin directories. These files should only exist on main
(materialized during publish). Requests changes if found.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-02-18 16:50:07 +11:00
Aaron Powell
48994b8c87 ci: limit publish workflow to single concurrent run
Cancel any in-progress publish when a new push to staged arrives,
ensuring only the latest version is published to main.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-02-18 15:25:39 +11:00
Aaron Powell
0efa435f50 ci: add workflow to reject PRs targeting main
PRs should target the staged branch. This workflow posts a review
requesting changes when a PR is opened against main, with instructions
to retarget to staged.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-02-18 14:49:24 +11:00
Aaron Powell
9d1df57ebc refactor: migrate plugins to Claude Code spec format
- Move plugin manifests from .github/plugin/ to .claude-plugin/
- Convert items[] to Claude Code spec fields (agents, commands, skills)
- Rename tags to keywords, drop display/featured/instructions from plugins
- Delete all symlinks and materialized files from plugin directories
- Add eng/materialize-plugins.mjs to copy source files into plugin dirs at publish time
- Add .github/workflows/publish.yml for staged->main publishing
- Update CI triggers to target staged branch
- Update validation, creation, marketplace, and README generation scripts
- Update CONTRIBUTING.md and AGENTS.md documentation
- Include all new content from main (polyglot-test-agent, gem-browser-tester,
  fabric-lakehouse, fluentui-blazor, quasi-coder, transloadit-media-processing,
  make-repo-contribution hardening, website logo/gradient changes)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-02-18 14:22:50 +11:00
Aaron Powell
8480453512 Merge pull request #749 from github/copilot/remove-logo-from-header
Remove logo icons from website header
2026-02-18 14:01:04 +11:00
Aaron Powell
3575e81185 Merge pull request #748 from jhauga/skill-quasi-coder
new skill quasi-coder
2026-02-18 14:00:24 +11:00
Aaron Powell
35cd212801 Merge pull request #733 from mubaidr/chrome-to-browser
refactor: rename gem-chrome-tester to gem-browser-tester
2026-02-18 13:59:41 +11:00
Aaron Powell
52dfa05b22 Merge pull request #746 from GeekTrainer/chore/harden-make-repo-contribution
chore: add security guardrails to make-repo-contribution skill
2026-02-18 13:58:50 +11:00
Aaron Powell
5a39f0f558 Merge pull request #741 from tedvilutis/main
Fabric Lakehouse Skill
2026-02-18 13:58:15 +11:00
copilot-swe-agent[bot]
9d41a60236 Remove logo icon from website header
Co-authored-by: aaronpowell <434140+aaronpowell@users.noreply.github.com>
2026-02-18 02:41:33 +00:00
copilot-swe-agent[bot]
3061ee06d4 Initial plan 2026-02-18 02:39:09 +00:00
John Haugabook
0015b7260c Update skills/quasi-coder/SKILL.md
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2026-02-17 20:49:40 -05:00
jhauga
45e7655e60 new skill quasi-coder 2026-02-17 19:50:28 -05:00
Aaron Powell
2017acd716 Merge pull request #744 from kvz/add-transloadit-media-processing
Add transloadit-media-processing skill
2026-02-18 10:24:48 +11:00
Aaron Powell
a2790216a6 Merge pull request #735 from JanKrivanek/dev/jankrivanek/polygot-test-agent
Add polygot test agent
2026-02-18 10:21:33 +11:00
Aaron Powell
64b2e574d9 Merge pull request #738 from AClerbois/skill/fluentui-blazor
Add fluentui-blazor skill
2026-02-18 10:08:48 +11:00
Muhammad Ubaid Raza
d477f8745f chore: add think before act 2026-02-18 03:10:15 +05:00
Christopher Harrison
784cd75a29 chore: add security guardrails to make-repo-contribution skill
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-02-17 15:27:02 -06:00
Ted Vilutis
3b907f7748 Update skills/fabric-lakehouse/SKILL.md
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2026-02-17 11:18:43 -08:00
Ted Vilutis
0de738c30c Update skills/fabric-lakehouse/SKILL.md
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2026-02-17 11:18:28 -08:00
Ted Vilutis
178fed8bb1 Update skills/fabric-lakehouse/references/pyspark.md
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2026-02-17 10:59:51 -08:00
Ted Vilutis
4b7ad71086 Update README.skills.md 2026-02-17 10:55:46 -08:00
Ted Vilutis
41b34b1bb2 Update skills/fabric-lakehouse/SKILL.md
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2026-02-17 10:53:52 -08:00