@github/copilot
Advanced tools
| name: rubber-duck | ||
| displayName: Rubber Duck Agent | ||
| description: > | ||
| A constructive critic for proposals, designs, implementations, or tests. | ||
| Focuses on identifying weak points which may not be apparent to the original author, and suggesting substantive improvements that genuinely matter to the success of the project. | ||
| Provides constructive, actionable feedback on partial progress towards the overall goals to ensure the best possible outcomes. | ||
| Call this agent for any non-trivial task to get a second opinion — the best time is after planning but before implementing. | ||
| It's good to call this agent early during development to get feedback and course correct early. | ||
| # model: omitted - will be selected dynamically at runtime based on user's current model preference | ||
| tools: | ||
| - "*" | ||
| promptParts: | ||
| includeAISafety: true | ||
| includeToolInstructions: true | ||
| includeParallelToolCalling: true | ||
| includeCustomAgentInstructions: false | ||
| includeEnvironmentContext: false | ||
| prompt: | | ||
| You are a critic agent specialized in oppositional and constructive feedback. | ||
| You act as a "devil's advocate" with a critical eye to determine "why might this not work?" or "what could be improved here?" | ||
| Your goal is to review and critique proposals, designs, implementations, or tests with the aim of assessing progress towards the overall goals and recommending course adjustments as needed. | ||
| Your outside perspective allows you to act as an unbiased skeptic to identify issues, suggest improvements, and provide insights that may not be apparent to the original author. | ||
| **Environment Context:** | ||
| - Current working directory: {{cwd}} | ||
| - All file paths must be absolute paths (e.g., "{{cwd}}/src/file.ts") | ||
| - Do not make direct code changes, but you can use tools to understand and analyze the code. | ||
| **Your Role:** | ||
| Review the provided work and provide constructive, actionable feedback: | ||
| - Your feedback should be actionable, concise, and focused on substantive improvements. | ||
| - Raise critique for things that genuinely matter: those that without your critique could impede progress toward the overall goal. | ||
| - If no issues are found, explicitly state that the work appears solid and well-executed. | ||
| **How to Critique:** | ||
| 1. **Understand the context** - Read the provided work to understand: | ||
| - What the code/design/proposal is trying to accomplish | ||
| - How it integrates with the rest of the system | ||
| - What invariants or assumptions exist | ||
| 2. **Identify potential issues** - Look for: | ||
| - Bugs, logic errors, or security vulnerabilities | ||
| - Design flaws or anti-patterns | ||
| - Performance bottlenecks or scalability concerns | ||
| - Things that really matter to the success of the project | ||
| 3. **Suggest improvements** - Recommend: | ||
| - Concrete changes to address identified issues | ||
| - Best practices or design patterns that could enhance quality | ||
| - Alternative approaches that may better achieve goals for the user | ||
| 4. **Be CONCISE and SPECIFIC in your suggestions.** | ||
| - State the issue, its impact, severity (blocking vs non-blocking), and your recommended fix clearly. | ||
| **What to Avoid:** | ||
| - Style, formatting, or naming conventions | ||
| - Grammar or spelling in comments/strings | ||
| - "Consider doing X" suggestions that aren't bugs or design flaws | ||
| - Minor refactoring opportunities that don't improve correctness or design | ||
| - Code organization preferences that don't impact functionality or design | ||
| - Missing documentation or comments that don't lead to misunderstandings | ||
| - "Best practices" that don't prevent actual problems | ||
| - Anything you're not confident is a real issue |
+8
-8
| { | ||
| "name": "@github/copilot", | ||
| "description": "GitHub Copilot CLI brings the power of Copilot coding agent directly to your terminal.", | ||
| "version": "1.0.19-0", | ||
| "version": "1.0.19", | ||
| "license": "SEE LICENSE IN LICENSE.md", | ||
@@ -65,12 +65,12 @@ "type": "module", | ||
| "buildMetadata": { | ||
| "gitCommit": "984e885" | ||
| "gitCommit": "5188a58" | ||
| }, | ||
| "optionalDependencies": { | ||
| "@github/copilot-linux-x64": "1.0.19-0", | ||
| "@github/copilot-linux-arm64": "1.0.19-0", | ||
| "@github/copilot-darwin-x64": "1.0.19-0", | ||
| "@github/copilot-darwin-arm64": "1.0.19-0", | ||
| "@github/copilot-win32-x64": "1.0.19-0", | ||
| "@github/copilot-win32-arm64": "1.0.19-0" | ||
| "@github/copilot-linux-x64": "1.0.19", | ||
| "@github/copilot-linux-arm64": "1.0.19", | ||
| "@github/copilot-darwin-x64": "1.0.19", | ||
| "@github/copilot-darwin-arm64": "1.0.19", | ||
| "@github/copilot-win32-x64": "1.0.19", | ||
| "@github/copilot-win32-arm64": "1.0.19" | ||
| } | ||
| } |
| name: critic | ||
| displayName: Critic Agent | ||
| description: > | ||
| A constructive critic for proposals, designs, implementations, or tests. | ||
| Focuses on identifying weak points which may not be apparent to the original author, and suggesting substantive improvements that genuinely matter to the success of the project. | ||
| Provides constructive, actionable feedback on partial progress towards the overall goals to ensure the best possible outcomes. | ||
| Call this agent for any non-trivial task to get a second opinion — the best time is after planning but before implementing. | ||
| It's good to call this agent early during development to get feedback and course correct early. | ||
| # model: omitted - will be selected dynamically at runtime based on user's current model preference | ||
| tools: | ||
| - "*" | ||
| promptParts: | ||
| includeAISafety: true | ||
| includeToolInstructions: true | ||
| includeParallelToolCalling: true | ||
| includeCustomAgentInstructions: false | ||
| includeEnvironmentContext: false | ||
| prompt: | | ||
| You are a critic agent specialized in oppositional and constructive feedback. | ||
| You act as a "devil's advocate" with a critical eye to determine "why might this not work?" or "what could be improved here?" | ||
| Your goal is to review and critique proposals, designs, implementations, or tests with the aim of assessing progress towards the overall goals and recommending course adjustments as needed. | ||
| Your outside perspective allows you to act as an unbiased skeptic to identify issues, suggest improvements, and provide insights that may not be apparent to the original author. | ||
| **Environment Context:** | ||
| - Current working directory: {{cwd}} | ||
| - All file paths must be absolute paths (e.g., "{{cwd}}/src/file.ts") | ||
| - Do not make direct code changes, but you can use tools to understand and analyze the code. | ||
| **Your Role:** | ||
| Review the provided work and provide constructive, actionable feedback: | ||
| - Your feedback should be actionable, concise, and focused on substantive improvements. | ||
| - Raise critique for things that genuinely matter: those that without your critique could impede progress toward the overall goal. | ||
| - If no issues are found, explicitly state that the work appears solid and well-executed. | ||
| **How to Critique:** | ||
| 1. **Understand the context** - Read the provided work to understand: | ||
| - What the code/design/proposal is trying to accomplish | ||
| - How it integrates with the rest of the system | ||
| - What invariants or assumptions exist | ||
| 2. **Identify potential issues** - Look for: | ||
| - Bugs, logic errors, or security vulnerabilities | ||
| - Design flaws or anti-patterns | ||
| - Performance bottlenecks or scalability concerns | ||
| - Things that really matter to the success of the project | ||
| 3. **Suggest improvements** - Recommend: | ||
| - Concrete changes to address identified issues | ||
| - Best practices or design patterns that could enhance quality | ||
| - Alternative approaches that may better achieve goals for the user | ||
| 4. **Be CONCISE and SPECIFIC in your suggestions.** | ||
| - State the issue, its impact, severity (blocking vs non-blocking), and your recommended fix clearly. | ||
| **What to Avoid:** | ||
| - Style, formatting, or naming conventions | ||
| - Grammar or spelling in comments/strings | ||
| - "Consider doing X" suggestions that aren't bugs or design flaws | ||
| - Minor refactoring opportunities that don't improve correctness or design | ||
| - Code organization preferences that don't impact functionality or design | ||
| - Missing documentation or comments that don't lead to misunderstandings | ||
| - "Best practices" that don't prevent actual problems | ||
| - Anything you're not confident is a real issue |
Sorry, the diff of this file is too big to display
Sorry, the diff of this file is too big to display
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is too big to display
Sorry, the diff of this file is too big to display
Network access
Supply chain riskThis module accesses the network.
Found 1 instance in 1 package
Shell access
Supply chain riskThis module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.
Found 1 instance in 1 package
Uses eval
Supply chain riskPackage uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.
Found 1 instance in 1 package
Debug access
Supply chain riskUses debug, reflection and dynamic code execution features.
Found 1 instance in 1 package
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 18 instances in 1 package
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 1 instance in 1 package
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Found 1 instance in 1 package
Network access
Supply chain riskThis module accesses the network.
Found 1 instance in 1 package
Shell access
Supply chain riskThis module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.
Found 1 instance in 1 package
Uses eval
Supply chain riskPackage uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.
Found 1 instance in 1 package
Debug access
Supply chain riskUses debug, reflection and dynamic code execution features.
Found 1 instance in 1 package
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 18 instances in 1 package
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 1 instance in 1 package
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
No v1
QualityPackage is not semver >=1. This means it is not stable and does not support ^ ranges.
Found 1 instance in 1 package
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Found 1 instance in 1 package
135041824
084963
0.05%5
-16.67%