Security News
Rust 1.100 Will Add Dependency Cooldowns to Cargo
Rust 1.100 will add opt-in dependency cooldowns to Cargo, giving security scanners and maintainers time to catch malicious crate releases.
By Sarah Gooding - Oct 20, 2026
New:Introducing Socket Scanning for VS Code Marketplace Extensions.Learn more →
@openclaw/copilot
Advanced tools
@openclaw/copilot
OpenClaw GitHub Copilot agent runtime plugin (registers a `github-copilot` AgentHarness backed by @github/copilot-sdk over JSON-RPC to the GitHub Copilot CLI)
GitHub Copilot agent runtime (OpenClaw plugin)
External OpenClaw plugin that registers a copilot agent harness backed by @github/copilot-sdk and the GitHub Copilot CLI.
Install
openclaw plugins install @openclaw/copilot
Restart the Gateway after installing or updating the plugin.
The harness claims the canonical subscription github-copilot provider plus
custom BYOK provider entries that the Copilot SDK can represent. Manifest-owned
native provider ids stay with their owning runtimes. The harness is opt-in only:
selection requires explicit agentRuntime.id: "copilot" on a model or provider
entry; auto never picks it. OpenClaw remains the default embedded runtime.
See GitHub Copilot agent runtime for configuration, the doctor contract, transcript mirroring, compaction, side questions, replay, and the supported-surface contract.
Package
- Plugin id:
copilot - Package:
@openclaw/copilot - Minimum OpenClaw host:
2026.5.28
FAQs
OpenClaw GitHub Copilot agent runtime plugin (registers a `github-copilot` AgentHarness backed by @github/copilot-sdk over JSON-RPC to the GitHub Copilot CLI)
The npm package @openclaw/copilot receives a total of 0 weekly downloads. As such, @openclaw/copilot popularity was classified as not popular.
We found that @openclaw/copilot demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Package last updated on 18 Oct 2026
Related posts
Security News
Deno Goes the Way of the Dinosaur
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.
By Sarah Gooding - Oct 16, 2026
Security News
Anthropic Gives Open Source Maintainers a Fast Track to Mythos Vulnerability Findings
Anthropic’s free OSS Scanner uses Mythos and other Claude models to find open source vulnerabilities and send maintainers reports with proposed fixes.
By Sarah Gooding - Oct 15, 2026