Security

Security audits, vulnerabilities, compliance, auth, secrets, and safe automation

skills in category: 29,024
pages available: 1,210

Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.

Open in full browser

Browse security skills

Showing 1,561–1,584 of 29,024 skills

Gh Aw Agent Result Provenance HandoffAUse when a task involves preserving provenance when an agent analysis result is handed to another workflow job to record the product, runtime and repository version, identity, trust boundary, data sensitivity, controlling artifact, owner, and approval scope before applying the method. Distinguish documented behavior from tested behavior, verify with a bounded reproducible case, preserve provenance, and report compatibility and uncertainty. Do not install, grant access, send external writes, o...securityrustrailsVotes: 0GitHub stars: 2
Copilot Sdk Tool Result Size BudgetAUse when a task involves controlling size and sensitivity of tool results passed back into an SDK session to record the product, runtime and repository version, identity, trust boundary, data sensitivity, controlling artifact, owner, and approval scope before applying the method. Distinguish documented behavior from tested behavior, verify with a bounded reproducible case, preserve provenance, and report compatibility and uncertainty. Do not install, grant access, send external writes, or cha...securityrustrailsVotes: 0GitHub stars: 2
Copilot Sdk Tool Failure Hook ClassificationAUse when a task involves checking that failed tool calls reach the correct SDK failure-handling path to record the product, runtime and repository version, identity, trust boundary, data sensitivity, controlling artifact, owner, and approval scope before applying the method. Distinguish documented behavior from tested behavior, verify with a bounded reproducible case, preserve provenance, and report compatibility and uncertainty. Do not install, grant access, send external writes, or change p...securityrustrailsVotes: 0GitHub stars: 2
Copilot Sdk Subagent Concurrency BudgetAUse when a task involves planning bounded parallel subagent work in an SDK application to record the product, runtime and repository version, identity, trust boundary, data sensitivity, controlling artifact, owner, and approval scope before applying the method. Distinguish documented behavior from tested behavior, verify with a bounded reproducible case, preserve provenance, and report compatibility and uncertainty. Do not install, grant access, send external writes, or change production poli...securityrustrailsVotes: 0GitHub stars: 2
Copilot Sdk Session Working Directory ScopeAUse when a task involves auditing filesystem boundaries configured for a persistent or resumed SDK session to record the product, runtime and repository version, identity, trust boundary, data sensitivity, controlling artifact, owner, and approval scope before applying the method. Distinguish documented behavior from tested behavior, verify with a bounded reproducible case, preserve provenance, and report compatibility and uncertainty. Do not install, grant access, send external writes, or ch...securityrustrailsVotes: 0GitHub stars: 2
Copilot Sdk Session Persistence ConfidentialityAUse when a task involves checking confidentiality controls for conversation and tool state persisted by an SDK to record the product, runtime and repository version, identity, trust boundary, data sensitivity, controlling artifact, owner, and approval scope before applying the method. Distinguish documented behavior from tested behavior, verify with a bounded reproducible case, preserve provenance, and report compatibility and uncertainty. Do not install, grant access, send external writes, o...securityrustrailsVotes: 0GitHub stars: 2
Copilot Sdk Session Owner Authorization ReviewAUse when a task involves checking that only the owning principal can inspect, resume, or control a persisted Copilot session to record the product, runtime and repository version, identity, trust boundary, data sensitivity, controlling artifact, owner, and approval scope before applying the method. Distinguish documented behavior from tested behavior, verify with a bounded reproducible case, preserve provenance, and report compatibility and uncertainty. Do not install, grant access, send exte...securityrustrailsVotes: 0GitHub stars: 2
Copilot Sdk Session Id Privacy ReviewAUse when a task involves reviewing identifiers used to create and resume persistent Copilot SDK sessions to record the product, runtime and repository version, identity, trust boundary, data sensitivity, controlling artifact, owner, and approval scope before applying the method. Distinguish documented behavior from tested behavior, verify with a bounded reproducible case, preserve provenance, and report compatibility and uncertainty. Do not install, grant access, send external writes, or chan...securityrustrailsVotes: 0GitHub stars: 2
Copilot Sdk Resume Permission RevalidationAUse when a task involves checking that tool permissions are recalculated when a persisted session resumes to record the product, runtime and repository version, identity, trust boundary, data sensitivity, controlling artifact, owner, and approval scope before applying the method. Distinguish documented behavior from tested behavior, verify with a bounded reproducible case, preserve provenance, and report compatibility and uncertainty. Do not install, grant access, send external writes, or cha...securityrustrailsVotes: 0GitHub stars: 2
Copilot Sdk Remote Session Permission BoundaryAUse when a task involves checking whether remote participants can expand the local SDK session's tool authority to record the product, runtime and repository version, identity, trust boundary, data sensitivity, controlling artifact, owner, and approval scope before applying the method. Distinguish documented behavior from tested behavior, verify with a bounded reproducible case, preserve provenance, and report compatibility and uncertainty. Do not install, grant access, send external writes, ...securityrustrailsVotes: 0GitHub stars: 2
Copilot Sdk Remote Session Link Sharing ReviewAUse when a task involves reviewing controls around links that expose a local SDK session through a remote interface to record the product, runtime and repository version, identity, trust boundary, data sensitivity, controlling artifact, owner, and approval scope before applying the method. Distinguish documented behavior from tested behavior, verify with a bounded reproducible case, preserve provenance, and report compatibility and uncertainty. Do not install, grant access, send external writ...securityrustrailsVotes: 0GitHub stars: 2
Copilot Sdk Pre Tool Argument ValidationAUse when a task involves validating tool arguments intercepted or modified before SDK tool execution to record the product, runtime and repository version, identity, trust boundary, data sensitivity, controlling artifact, owner, and approval scope before applying the method. Distinguish documented behavior from tested behavior, verify with a bounded reproducible case, preserve provenance, and report compatibility and uncertainty. Do not install, grant access, send external writes, or change p...securityrustrailsVotes: 0GitHub stars: 2
Copilot Sdk Post Tool Result Provenance ReviewAUse when a task involves checking that post-tool hooks preserve the identity and trust level of tool output to record the product, runtime and repository version, identity, trust boundary, data sensitivity, controlling artifact, owner, and approval scope before applying the method. Distinguish documented behavior from tested behavior, verify with a bounded reproducible case, preserve provenance, and report compatibility and uncertainty. Do not install, grant access, send external writes, or c...securityrustrailsVotes: 0GitHub stars: 2
Copilot Sdk Permission Handler Fail Closed ReviewAUse when a task involves reviewing default behavior when an SDK permission callback errors, times out, or returns malformed data to record the product, runtime and repository version, identity, trust boundary, data sensitivity, controlling artifact, owner, and approval scope before applying the method. Distinguish documented behavior from tested behavior, verify with a bounded reproducible case, preserve provenance, and report compatibility and uncertainty. Do not install, grant access, send ...securityrustrailsVotes: 0GitHub stars: 2
Copilot Sdk Mcp Connection Lifecycle ReviewAUse when a task involves reviewing how an SDK session starts, scopes, monitors, and shuts down MCP connections to record the product, runtime and repository version, identity, trust boundary, data sensitivity, controlling artifact, owner, and approval scope before applying the method. Distinguish documented behavior from tested behavior, verify with a bounded reproducible case, preserve provenance, and report compatibility and uncertainty. Do not install, grant access, send external writes, o...securityrustrailsVotes: 0GitHub stars: 2
Copilot Sdk Byok Credential Isolation AuditAUse when a task involves reviewing how bring-your-own-key credentials are supplied to an SDK session to record the product, runtime and repository version, identity, trust boundary, data sensitivity, controlling artifact, owner, and approval scope before applying the method. Distinguish documented behavior from tested behavior, verify with a bounded reproducible case, preserve provenance, and report compatibility and uncertainty. Do not install, grant access, send external writes, or change p...securityrustrailsVotes: 0GitHub stars: 2
Copilot Cli Working Directory Change ApprovalAUse when a task involves reviewing directory changes that alter the source or side-effect scope of a CLI task to record the product, runtime and repository version, identity, trust boundary, data sensitivity, controlling artifact, owner, and approval scope before applying the method. Distinguish documented behavior from tested behavior, verify with a bounded reproducible case, preserve provenance, and report compatibility and uncertainty. Do not install, grant access, send external writes, or...securityrustrailsVotes: 0GitHub stars: 2
Copilot Cli Tool Alias Compatibility CheckAUse when a task involves checking whether configured tool aliases resolve to the intended permissions in a CLI release to record the product, runtime and repository version, identity, trust boundary, data sensitivity, controlling artifact, owner, and approval scope before applying the method. Distinguish documented behavior from tested behavior, verify with a bounded reproducible case, preserve provenance, and report compatibility and uncertainty. Do not install, grant access, send external w...securityrustrailsVotes: 0GitHub stars: 2
Copilot Cli Subagent Permission Inheritance AuditAUse when a task involves checking what tools and paths a delegated CLI subagent inherits from its parent to record the product, runtime and repository version, identity, trust boundary, data sensitivity, controlling artifact, owner, and approval scope before applying the method. Distinguish documented behavior from tested behavior, verify with a bounded reproducible case, preserve provenance, and report compatibility and uncertainty. Do not install, grant access, send external writes, or chan...securityrustrailsVotes: 0GitHub stars: 2
Copilot Cli Session Configuration Drift AuditAUse when a task involves checking whether CLI behavior changes after user, repository, or plugin configuration updates to record the product, runtime and repository version, identity, trust boundary, data sensitivity, controlling artifact, owner, and approval scope before applying the method. Distinguish documented behavior from tested behavior, verify with a bounded reproducible case, preserve provenance, and report compatibility and uncertainty. Do not install, grant access, send external w...securityrustrailsVotes: 0GitHub stars: 2
Copilot Cli Secret Redaction In Agent LogsAUse when a task involves reviewing prompt, tool, hook, and session logs for accidental secret exposure to record the product, runtime and repository version, identity, trust boundary, data sensitivity, controlling artifact, owner, and approval scope before applying the method. Distinguish documented behavior from tested behavior, verify with a bounded reproducible case, preserve provenance, and report compatibility and uncertainty. Do not install, grant access, send external writes, or change...securityrustrailsVotes: 0GitHub stars: 2
Copilot Cli Runtime Environment InventoryAUse when a task involves recording the effective runtime and configuration that influenced a CLI session to record the product, runtime and repository version, identity, trust boundary, data sensitivity, controlling artifact, owner, and approval scope before applying the method. Distinguish documented behavior from tested behavior, verify with a bounded reproducible case, preserve provenance, and report compatibility and uncertainty. Do not install, grant access, send external writes, or chan...securityrustrailsVotes: 0GitHub stars: 2
Copilot Cli Programmatic Prompt Trust BoundaryAUse when a task involves reviewing prompts supplied to non-interactive Copilot CLI invocation to record the product, runtime and repository version, identity, trust boundary, data sensitivity, controlling artifact, owner, and approval scope before applying the method. Distinguish documented behavior from tested behavior, verify with a bounded reproducible case, preserve provenance, and report compatibility and uncertainty. Do not install, grant access, send external writes, or change producti...securityrustshellVotes: 0GitHub stars: 2
Copilot Cli Precommit Review Timeout PolicyAUse when a task involves setting bounded behavior for an automated agent review invoked by a local commit hook to record the product, runtime and repository version, identity, trust boundary, data sensitivity, controlling artifact, owner, and approval scope before applying the method. Distinguish documented behavior from tested behavior, verify with a bounded reproducible case, preserve provenance, and report compatibility and uncertainty. Do not install, grant access, send external writes, o...securityrustrailsVotes: 0GitHub stars: 2