mirror of
https://github.com/github/awesome-copilot.git
synced 2026-10-12 23:04:14 +00:00
Burak Kaygusuz
c5a2d812f9
* feat(skills): modularize audit-integrity references for progressive disclosure * refactor(agents): adopt progressive disclosure in sast-sca-security-analyzer * style(skills): format table alignment in security-report-template * refactor(skills): restore domain-agnostic audit-integrity references * refactor(agents): make sast-sca-security-analyzer self-contained
807 B
807 B
Clarification Protocol
Before you start the analysis, pause and ask the user a maximum of 2 targeted questions when:
- The system scope, asset boundary, or target module is ambiguous and you cannot infer it from the context
- A critical trust boundary or privilege tier is undefined
- The business context for impact prioritization or compliance framework selection is absent
- The programming language or framework cannot be detected from the workspace
Rules:
- State your working assumptions explicitly and proceed.
- Do not wait for confirmation unless the ambiguity alters the attack surface definition or trust boundary map.
- Ask a maximum of 2 questions. If more ambiguity exists, document your assumptions and proceed.
- If no ambiguity exists, proceed directly without questions.