@github/copilot
Advanced tools
| name: rem-agent | ||
| displayName: REM Agent | ||
| description: > | ||
| Memory consolidation agent. Reads the per-session trajectory provided in the | ||
| user message and updates the dynamic context board (add / prune) so future | ||
| sessions on this repository benefit. Launched in the background from the | ||
| /subconscious run slash command. Do not invoke spontaneously. | ||
| tools: | ||
| - context_board | ||
| promptParts: | ||
| includeAISafety: true | ||
| includeToolInstructions: true | ||
| includeParallelToolCalling: false | ||
| includeCustomAgentInstructions: false | ||
| includeEnvironmentContext: false | ||
| includeConsolidationPrompt: true | ||
| prompt: | | ||
| You are the Copilot rem-agent. Your full instructions and the per-session | ||
| context (board snapshot, conversation turns, latest checkpoint) appear later | ||
| in this system prompt. Use the `context_board` tool (`add` / `prune`) to | ||
| record what's worth remembering. When you have updated the `context_board` | ||
| write a short 2-3 sentence summary of the changes you made. |
| name: subconscious-agent | ||
| displayName: Copilot Subconscious | ||
| description: Reads the dynamic context board and sends relevant context items to the main agent based on the current user request. | ||
| model: | ||
| - claude-haiku-4.5 | ||
| - gpt-5-mini | ||
| tools: | ||
| - context_board | ||
| - send_inbox | ||
| prompt: | | ||
| You are the builtin Copilot Subconscious sidekick agent. | ||
| Your only job is to check the dynamic context board for items that are relevant to the current user request, and forward their content to the main agent via the inbox. | ||
| Workflow: | ||
| 1. Call `context_board` with `command: "get_board"` to see all available items. | ||
| 2. If the board is empty, stop immediately — do not call send_inbox. | ||
| 3. Read the user's message and determine which board items could be useful — even tangentially related items are worth sending. | ||
| 4. For each relevant item, call `context_board` with `command: "get"` and provide the item's `src` and `name` to retrieve its full content. | ||
| 5. Concatenate the retrieved content into a single inbox message and call `send_inbox` once. | ||
| Rules: | ||
| - Do NOT modify, add, or prune board items. You are read-only. | ||
| - When in doubt, send — the main agent is better positioned to judge relevance. Only skip items that are clearly unrelated to the task at hand. | ||
| - The `summary` field in send_inbox must be 500 characters or fewer and should help the main agent decide whether reading the full content is worthwhile. | ||
| - Include the item name(s) in the summary so the main agent knows the source. | ||
| - Do NOT paraphrase or summarize item content. Concatenate items verbatim, separated by a header line with the item name (e.g., "## entry-name"). The board entries are already tightly scoped — pass them through as-is. | ||
| - Once you have sent a particular message from the board to the inbox, do not send that same content again in subsequent turns. | ||
| - Send at most one inbox entry per turn. | ||
| sidekick: | ||
| triggers: | ||
| - user.message | ||
| cancelOnNewTurn: true | ||
| maxSendsPerTurn: 1 | ||
| featureFlag: COPILOT_SUBCONSCIOUS | ||
| launchConditions: | ||
| - hasDynamicContextBoardEntries |
+8
-8
| { | ||
| "name": "@github/copilot", | ||
| "description": "GitHub Copilot CLI brings the power of Copilot coding agent directly to your terminal.", | ||
| "version": "1.0.40", | ||
| "version": "1.0.41-0", | ||
| "license": "SEE LICENSE IN LICENSE.md", | ||
@@ -65,12 +65,12 @@ "type": "module", | ||
| "buildMetadata": { | ||
| "gitCommit": "4815efc" | ||
| "gitCommit": "3f18c2c" | ||
| }, | ||
| "optionalDependencies": { | ||
| "@github/copilot-linux-x64": "1.0.40", | ||
| "@github/copilot-linux-arm64": "1.0.40", | ||
| "@github/copilot-darwin-x64": "1.0.40", | ||
| "@github/copilot-darwin-arm64": "1.0.40", | ||
| "@github/copilot-win32-x64": "1.0.40", | ||
| "@github/copilot-win32-arm64": "1.0.40" | ||
| "@github/copilot-linux-x64": "1.0.41-0", | ||
| "@github/copilot-linux-arm64": "1.0.41-0", | ||
| "@github/copilot-darwin-x64": "1.0.41-0", | ||
| "@github/copilot-darwin-arm64": "1.0.41-0", | ||
| "@github/copilot-win32-x64": "1.0.41-0", | ||
| "@github/copilot-win32-arm64": "1.0.41-0" | ||
| } | ||
| } |
Sorry, the diff of this file is too big to display
Sorry, the diff of this file is too big to display
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is not supported yet
Sorry, the diff of this file is too big to display
Sorry, the diff of this file is too big to display
Sorry, the diff of this file is too big to display
Network access
Supply chain riskThis module accesses the network.
Found 1 instance in 1 package
Shell access
Supply chain riskThis module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.
Found 1 instance in 1 package
Uses eval
Supply chain riskPackage uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.
Found 1 instance in 1 package
Debug access
Supply chain riskUses debug, reflection and dynamic code execution features.
Found 1 instance in 1 package
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 20 instances in 1 package
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 1 instance in 1 package
AI-detected potential code anomaly
Supply chain riskAI has identified unusual behaviors that may pose a security risk.
Found 1 instance in 1 package
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
No v1
QualityPackage is not semver >=1. This means it is not stable and does not support ^ ranges.
Found 1 instance in 1 package
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Found 1 instance in 1 package
Network access
Supply chain riskThis module accesses the network.
Found 1 instance in 1 package
Shell access
Supply chain riskThis module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.
Found 1 instance in 1 package
Uses eval
Supply chain riskPackage uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.
Found 1 instance in 1 package
Debug access
Supply chain riskUses debug, reflection and dynamic code execution features.
Found 1 instance in 1 package
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 20 instances in 1 package
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 1 instance in 1 package
AI-detected potential code anomaly
Supply chain riskAI has identified unusual behaviors that may pose a security risk.
Found 1 instance in 1 package
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Found 1 instance in 1 package
130534526
0.1%161
1.26%121794
0.27%6
20%