Community-contributed instructions, agents, skills, and configurations to help you make the most of GitHub Copilot.
This report summarizes scanner evidence for github/awesome-copilot, a JavaScript project with 39,889 GitHub stars. SynthScan examined 559,111 lines of code across 2708 source files, recording 1557 pattern matches distributed across 23 syntactic categories. The legacy adjusted pattern signal is 6.0 (Moderate pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Can maintainers explain intent, assumptions, and trade-offs? 896 finding(s).
Are imports declared and package/API names verified? 281 finding(s).
Are wrappers, guards, and repeated structures necessary? 499 finding(s).
Which changes need focused human review? 1557 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 1557 distinct pattern matches across 23 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | instructions/agents.instructions.md | 501 | ### Step 1: Identify Project | COMMENT |
| LOW | instructions/agents.instructions.md | 678 | ## Step 2: Dependency Audit | COMMENT |
| LOW | …onvert-cassandra-to-spring-data-cosmos.instructions.md | 367 | ### Step 1: Identify Residual Cassandra Files | COMMENT |
| LOW | …onvert-cassandra-to-spring-data-cosmos.instructions.md | 389 | ### Step 2: Run Incremental Compilation Checks | COMMENT |
| LOW | …onvert-cassandra-to-spring-data-cosmos.instructions.md | 406 | ### Step 3: Fix Constructor-Related Errors Systematically | COMMENT |
| LOW | …onvert-cassandra-to-spring-data-cosmos.instructions.md | 420 | ### Step 4: Update Tests Last | COMMENT |
| LOW | …onvert-cassandra-to-spring-data-cosmos.instructions.md | 428 | ### Step 5: Verify Zero Compilation Errors | COMMENT |
| LOW⚡ | …ons/dotnet-architecture-good-practices.instructions.md | 117 | ### Step 1: Domain Analysis (REQUIRED) | COMMENT |
| LOW⚡ | …ons/dotnet-architecture-good-practices.instructions.md | 126 | ### Step 2: Architecture Review (REQUIRED) | COMMENT |
| LOW⚡ | …ons/dotnet-architecture-good-practices.instructions.md | 135 | ### Step 3: Implementation Planning (REQUIRED) | COMMENT |
| LOW⚡ | …ons/dotnet-architecture-good-practices.instructions.md | 144 | ### Step 4: Implementation Execution | COMMENT |
| LOW⚡ | …ons/dotnet-architecture-good-practices.instructions.md | 154 | ### Step 5: Post-Implementation Review (REQUIRED) | COMMENT |
| LOW⚡ | …ons/dataverse-python-agentic-workflows.instructions.md | 90 | # Step 1: Quality check | COMMENT |
| LOW⚡ | …ons/dataverse-python-agentic-workflows.instructions.md | 94 | # Step 2: Enrich data | COMMENT |
| LOW⚡ | …ons/dataverse-python-agentic-workflows.instructions.md | 98 | # Step 3: Sync to external systems | COMMENT |
| LOW⚡ | …ons/power-bi-devops-alm-best-practices.instructions.md | 473 | # Step 1: Export current state as emergency backup | COMMENT |
| LOW⚡ | …ons/power-bi-devops-alm-best-practices.instructions.md | 477 | # Step 2: Restore from backup | COMMENT |
| LOW⚡ | …ons/power-bi-devops-alm-best-practices.instructions.md | 486 | # Step 3: Validate rollback | COMMENT |
| LOW | instructions/tailwind-v4-vite.instructions.md | 20 | ### Step 1: Install Dependencies | COMMENT |
| LOW | instructions/tailwind-v4-vite.instructions.md | 28 | ### Step 2: Configure Vite Plugin | COMMENT |
| LOW⚡ | instructions/tailwind-v4-vite.instructions.md | 60 | ### Step 3: Import Tailwind CSS | COMMENT |
| LOW⚡ | instructions/tailwind-v4-vite.instructions.md | 68 | ### Step 4: Verify CSS Import in Entry Point | COMMENT |
| LOW⚡ | instructions/tailwind-v4-vite.instructions.md | 77 | ### Step 5: Start Development Server | COMMENT |
| LOW | …otnet-maui-9-to-dotnet-maui-10-upgrade.instructions.md | 132 | #### Step 1: Install CommunityToolkit.Mvvm | COMMENT |
| LOW | …otnet-maui-9-to-dotnet-maui-10-upgrade.instructions.md | 138 | #### Step 2: Define Message Classes | COMMENT |
| LOW | …otnet-maui-9-to-dotnet-maui-10-upgrade.instructions.md | 156 | #### Step 3: Update Send Calls | COMMENT |
| LOW | …otnet-maui-9-to-dotnet-maui-10-upgrade.instructions.md | 172 | #### Step 4: Update Subscribe Calls | COMMENT |
| LOW | …otnet-maui-9-to-dotnet-maui-10-upgrade.instructions.md | 213 | #### Step 5: Unregister When Done | COMMENT |
| LOW⚡ | plugins/napkin/README.md | 29 | ### Step 1: Say "let's napkin" | COMMENT |
| LOW⚡ | plugins/napkin/README.md | 35 | ### Step 2: Your whiteboard opens | COMMENT |
| LOW⚡ | plugins/napkin/README.md | 41 | ### Step 3: Draw and brainstorm | COMMENT |
| LOW⚡ | plugins/napkin/README.md | 47 | ### Step 4: Share with Copilot | COMMENT |
| LOW⚡ | plugins/napkin/README.md | 53 | ### Step 5: Copilot responds | COMMENT |
| LOW | plugins/project-documenter/README.md | 37 | ### Step 1: Discover | COMMENT |
| LOW | plugins/project-documenter/README.md | 46 | ### Step 2: Generate Diagrams | COMMENT |
| LOW | plugins/project-documenter/README.md | 60 | ### Step 3: Write Markdown | COMMENT |
| LOW | plugins/project-documenter/README.md | 75 | ### Step 4: Word Document | COMMENT |
| LOW | plugins/project-documenter/README.md | 85 | ### Step 5: Verify | COMMENT |
| LOW | …ite/src/content/docs/learning-hub/agentic-workflows.md | 131 | ### Step 1: Create the Workflow File | COMMENT |
| LOW | …ite/src/content/docs/learning-hub/agentic-workflows.md | 139 | ### Step 2: Add Frontmatter | COMMENT |
| LOW | …ite/src/content/docs/learning-hub/agentic-workflows.md | 167 | ### Step 3: Write Clear Instructions | COMMENT |
| LOW | …ite/src/content/docs/learning-hub/agentic-workflows.md | 187 | ### Step 4: Validate and Test | COMMENT |
| LOW | …ite/src/content/docs/learning-hub/agentic-workflows.md | 194 | ### Step 5: Submit Your Contribution | COMMENT |
| LOW⚡ | …content/docs/learning-hub/creating-effective-skills.md | 290 | ## Step 1: Analysis | COMMENT |
| LOW⚡ | …content/docs/learning-hub/creating-effective-skills.md | 293 | ## Step 2: Generation | COMMENT |
| LOW⚡ | …content/docs/learning-hub/creating-effective-skills.md | 296 | ## Step 3: Validation | COMMENT |
| LOW⚡ | …/docs/learning-hub/cli-for-beginners/06-mcp-servers.md | 573 | # Step 1: Use filesystem MCP to explore the book app | COMMENT |
| LOW⚡ | …/docs/learning-hub/cli-for-beginners/06-mcp-servers.md | 582 | # Step 2: Use GitHub MCP to check recent changes | COMMENT |
| LOW⚡ | …/docs/learning-hub/cli-for-beginners/06-mcp-servers.md | 590 | # Step 3: Use Context7 MCP for best practices | COMMENT |
| LOW⚡ | …/docs/learning-hub/cli-for-beginners/06-mcp-servers.md | 599 | # Step 4: Synthesize a recommendation | COMMENT |
| LOW⚡ | …ning-hub/cli-for-beginners/03-development-workflows.md | 839 | # Step 1: Review | COMMENT |
| LOW⚡ | …ning-hub/cli-for-beginners/03-development-workflows.md | 842 | # Step 2: Refactor | COMMENT |
| LOW⚡ | …ning-hub/cli-for-beginners/03-development-workflows.md | 845 | # Step 3: Test | COMMENT |
| LOW⚡ | …ning-hub/cli-for-beginners/03-development-workflows.md | 852 | # Step 4: Review | COMMENT |
| LOW⚡ | …ning-hub/cli-for-beginners/03-development-workflows.md | 855 | # Step 5: Commit | COMMENT |
| LOW | …/docs/learning-hub/cli-for-beginners/00-quick-start.md | 156 | ### Step 1: Test Copilot CLI | COMMENT |
| LOW | …/docs/learning-hub/cli-for-beginners/00-quick-start.md | 185 | ### Step 2: Run the Sample Book App | COMMENT |
| LOW | …/docs/learning-hub/cli-for-beginners/00-quick-start.md | 198 | ### Step 3: Try Copilot CLI with the Book App | COMMENT |
| LOW⚡ | …-hub/cli-for-beginners/02-context-and-conversations.md | 650 | # Step 1: Start with structure | COMMENT |
| LOW⚡ | …-hub/cli-for-beginners/02-context-and-conversations.md | 653 | # Step 2: Narrow based on answer | COMMENT |
| 458 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | instructions/shell.instructions.md | 53 | # ============================================================================ | COMMENT |
| MEDIUM | instructions/shell.instructions.md | 55 | # ============================================================================ | COMMENT |
| MEDIUM | cookbook/copilot-sdk/python/accessibility-report.md | 45 | # ============================================================================ | COMMENT |
| MEDIUM | cookbook/copilot-sdk/python/accessibility-report.md | 47 | # ============================================================================ | COMMENT |
| MEDIUM | cookbook/copilot-sdk/python/pr-visualization.md | 54 | # ============================================================================ | COMMENT |
| MEDIUM | cookbook/copilot-sdk/python/pr-visualization.md | 56 | # ============================================================================ | COMMENT |
| MEDIUM | cookbook/copilot-sdk/python/pr-visualization.md | 104 | # ============================================================================ | COMMENT |
| MEDIUM | cookbook/copilot-sdk/python/pr-visualization.md | 106 | # ============================================================================ | COMMENT |
| MEDIUM | …book/copilot-sdk/python/recipe/error_recovery_hooks.py | 20 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …book/copilot-sdk/python/recipe/error_recovery_hooks.py | 22 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …book/copilot-sdk/python/recipe/error_recovery_hooks.py | 36 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …book/copilot-sdk/python/recipe/error_recovery_hooks.py | 38 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …book/copilot-sdk/python/recipe/error_recovery_hooks.py | 59 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …book/copilot-sdk/python/recipe/error_recovery_hooks.py | 61 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …book/copilot-sdk/python/recipe/error_recovery_hooks.py | 76 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …book/copilot-sdk/python/recipe/error_recovery_hooks.py | 78 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …book/copilot-sdk/python/recipe/error_recovery_hooks.py | 106 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …book/copilot-sdk/python/recipe/error_recovery_hooks.py | 108 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …book/copilot-sdk/python/recipe/error_recovery_hooks.py | 139 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …book/copilot-sdk/python/recipe/error_recovery_hooks.py | 141 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …book/copilot-sdk/python/recipe/error_recovery_hooks.py | 173 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …book/copilot-sdk/python/recipe/error_recovery_hooks.py | 175 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …book/copilot-sdk/python/recipe/accessibility_report.py | 12 | # ============================================================================ | COMMENT |
| MEDIUM | …book/copilot-sdk/python/recipe/accessibility_report.py | 14 | # ============================================================================ | COMMENT |
| MEDIUM | cookbook/copilot-sdk/python/recipe/pr_visualization.py | 16 | # ============================================================================ | COMMENT |
| MEDIUM | cookbook/copilot-sdk/python/recipe/pr_visualization.py | 18 | # ============================================================================ | COMMENT |
| MEDIUM | cookbook/copilot-sdk/python/recipe/pr_visualization.py | 66 | # ============================================================================ | COMMENT |
| MEDIUM | cookbook/copilot-sdk/python/recipe/pr_visualization.py | 68 | # ============================================================================ | COMMENT |
| MEDIUM | …/copilot-sdk/python/recipe/pyinstaller_frozen_build.py | 25 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …/copilot-sdk/python/recipe/pyinstaller_frozen_build.py | 27 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …/copilot-sdk/python/recipe/pyinstaller_frozen_build.py | 61 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …/copilot-sdk/python/recipe/pyinstaller_frozen_build.py | 63 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …/copilot-sdk/python/recipe/pyinstaller_frozen_build.py | 85 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …/copilot-sdk/python/recipe/pyinstaller_frozen_build.py | 87 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …/copilot-sdk/python/recipe/pyinstaller_frozen_build.py | 108 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | …/copilot-sdk/python/recipe/pyinstaller_frozen_build.py | 110 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | extensions/arcade-canvas/game/hud.js | 462 | // ── Hotkey picker ───────────────────────────────────────── | COMMENT |
| MEDIUM | extensions/arcade-canvas/game/hud.js | 475 | // ── Pause hotkey picker ──────────────────────────────────── | COMMENT |
| MEDIUM | extensions/arcade-canvas/game/hud.js | 488 | // ── Unpause hotkey picker ────────────────────────────────── | COMMENT |
| MEDIUM | extensions/arcade-canvas/game/hud.js | 713 | // ── Clear scores ──────────────────────────────────────────── | COMMENT |
| MEDIUM | extensions/arcade-canvas/game/scenes/BaseScene.js | 438 | // ── Ready screen ─────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM⚡ | hooks/tool-guardian/guard-tool.sh | 15 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | hooks/tool-guardian/guard-tool.sh | 17 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | hooks/tool-guardian/guard-tool.sh | 22 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | hooks/tool-guardian/guard-tool.sh | 24 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | hooks/tool-guardian/guard-tool.sh | 34 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | hooks/tool-guardian/guard-tool.sh | 36 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | hooks/tool-guardian/guard-tool.sh | 56 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | hooks/tool-guardian/guard-tool.sh | 58 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | hooks/tool-guardian/guard-tool.sh | 83 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | hooks/tool-guardian/guard-tool.sh | 88 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | hooks/tool-guardian/guard-tool.sh | 124 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | hooks/tool-guardian/guard-tool.sh | 126 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | hooks/tool-guardian/guard-tool.sh | 131 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM⚡ | hooks/tool-guardian/guard-tool.sh | 133 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | hooks/tool-guardian/guard-tool.sh | 152 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | hooks/tool-guardian/guard-tool.sh | 154 | # --------------------------------------------------------------------------- | COMMENT |
| MEDIUM | hooks/fix-broken-links/link-fix.sh | 36 | # ── Hook stdin ──────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | hooks/fix-broken-links/link-fix.sh | 87 | # ── Helpers ─────────────────────────────────────────────────────────────────── | COMMENT |
| MEDIUM | hooks/fix-broken-links/link-fix.sh | 254 | # ── File discovery ──────────────────────────────────────────────────────────── | COMMENT |
| 136 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 1011 | if (ncx >= gb.x && ncx <= gb.x + gb.w && ncy >= gb.y && ncy <= gb.y + gb.h) {{ | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 1021 | let dragging = null, dragOffX = 0, dragOffY = 0; | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 1022 | let draggingGroup = null, groupDragNodes = []; // for RG/group box dragging | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 1029 | let _selectedNodeId = null; | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 1038 | if (wasSelected) {{ _selectedNodeId = null; return; }} | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 1110 | let _vnetBounds = null; | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 1113 | const _hasPriv = NODES.some(n => n.private && n.type !== 'pe'); | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 1114 | const _hasVNI = VNET_INFO && VNET_INFO.length > 0; | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 1116 | if (_pg.length > 0 && (_hasPriv || _hasVNI || _hasPe)) {{ | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 1128 | const hasPrivateNodes = NODES.some(n => n.private && n.type !== 'pe'); | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 1129 | const hasVNetInfo = VNET_INFO && VNET_INFO.length > 0; | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 1131 | const showVNet = hasPrivateNodes || hasVNetInfo || hasPeNodes; | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 1133 | if (privateGroups.length > 0 && showVNet) {{ | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 1236 | return cx >= gb.x && cx <= gb.x + gb.w && cy >= gb.y && cy <= gb.y + gb.h; | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 1242 | if (HIERARCHY.length > 1 && useRgLayout) {{ | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 1245 | const subRgBoxes = groupBoxes.filter(gb => gb.isRG && gb.subscription === sub.subscription); | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 1322 | if (hit && tmin < tmax) return true; | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 1329 | if (gi1 < 0 || gi2 < 0) return null; | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 1329 | if (gi1 < 0 || gi2 < 0) return null; | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 1332 | const yOverlap = g1.y < g2.y + g2.h && g2.y < g1.y + g1.h; | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 1333 | if (!yOverlap) return null; | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 1337 | return null; | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 1364 | if (aIsH === bIsH) return null; | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 1374 | if (vx > hx1 + MM && vx < hx2 - MM && | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 1375 | hy > vy1 + MM && hy < vy2 - MM) {{ | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 1378 | return null; | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 1498 | if (gi === _fromGrp || gi === _toGrp) continue; | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 1501 | sectionObstacles.push(gb); | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 1509 | const inAnchor = (a) => (a.x > _vnetBounds.x && a.x < _vnetBounds.x + _vnetBounds.w | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 1510 | && a.y > _vnetBounds.y && a.y < _vnetBounds.y + _vnetBounds.h); | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 1516 | if (val > L && val < R) return (val - L) <= (R - val) ? L - SECTION_MARGIN : R + SECTION_MARGIN; | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 1519 | if (val > T && val < B) return (val - T) <= (B - val) ? T - SECTION_MARGIN : B + SECTION_MARGIN; | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 1706 | if (!fn || !tn) {{ _edgeSides.push(null); return; }} | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 1706 | if (!fn || !tn) {{ _edgeSides.push(null); return; }} | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 1709 | if (!fromBox || !toBox) {{ _edgeSides.push(null); return; }} | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 1709 | if (!fromBox || !toBox) {{ _edgeSides.push(null); return; }} | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 1730 | _edgeSides.push({{ exitSide, entrySide, isPeEdge, fromBox, toBox, edge }}); | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 1744 | if (cx >= gb.x && cx <= gb.x + gb.w && cy >= gb.y && cy <= gb.y + gb.h) {{ | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 1754 | if (!info || info.isPeEdge) return; | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 1756 | if (sg === undefined || tg === undefined) return; | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 1756 | if (sg === undefined || tg === undefined) return; | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 1844 | const _ck = _sg !== undefined && _tg !== undefined && _sg !== _tg | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 1845 | ? Math.min(_sg, _tg) + '_' + Math.max(_sg, _tg) : null; | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 1846 | const _cc = _ck ? _chMap[_ck] : null; | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 1853 | let midX = (_cc && _cc.axis === 'x') ? _cc.value + _co : (sp.x + ep.x) / 2 + _co; | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 1963 | if (Math.abs(_a.x - _b.x) > 1 && Math.abs(_a.y - _b.y) > 1) {{ | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 1971 | if (Math.abs(_a.x - _b.x) <= 1 && Math.abs(_a.y - _b.y) <= 1) {{ | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 1974 | if ((Math.abs(_a.x - _b.x) <= 1 && Math.abs(_b.x - _c.x) <= 1) || | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 1975 | (Math.abs(_a.y - _b.y) <= 1 && Math.abs(_b.y - _c.y) <= 1)) {{ | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 1980 | _allEdgePaths.push({{ edge, pts, isPeEdge }}); | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 2030 | if (Math.abs(_a.x - _b.x) > 1 && Math.abs(_a.y - _b.y) > 1) {{ | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 2037 | if (Math.abs(_a.x - _b.x) <= 1 && Math.abs(_a.y - _b.y) <= 1) {{ | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 2040 | if ((Math.abs(_a.x - _b.x) <= 1 && Math.abs(_b.x - _c.x) <= 1) || | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 2041 | (Math.abs(_a.y - _b.y) <= 1 && Math.abs(_b.y - _c.y) <= 1)) {{ | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 2111 | if (_allEdgePaths[i].isPeEdge || _tried.has(i)) continue; | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 2115 | if (worstIdx < 0 || worstCnt === 0) break; | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 2122 | let bestPts = origPts, bestCnt = worstCnt, bestSide = null; | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 2153 | if (p2.y < _gbTop) {{ _marginEdges.top.push(i); }} | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 2154 | else if (p2.y > _gbBottom) {{ _marginEdges.bottom.push(i); }} | CODE |
| HIGH⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 2157 | if (p2.x < _gbLeft) {{ _marginEdges.left.push(i); }} | CODE |
| 92 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | README.md | 15 | New to GitHub Copilot customization? The **[Learning Hub](https://awesome-copilot.github.com/learning-hub)** on the webs | CODE |
| MEDIUM | CONTRIBUTING.md | 17 | - [Adding Agentic Workflows](#adding-agentic-workflows) | CODE |
| MEDIUM | CONTRIBUTING.md | 379 | [Agentic Workflows](https://github.github.com/gh-aw) are AI-powered repository automations that run coding agents in Git | CODE |
| MEDIUM | instructions/dart-n-flutter.instructions.md | 395 | #### Use dependency injection. | COMMENT |
| MEDIUM | instructions/agent-skills.instructions.md | 185 | ├── scaffold.py # Code scaffold the AI agent customizes | CODE |
| MEDIUM | …ons/dataverse-python-agentic-workflows.instructions.md | 523 | - [Release Plan: Agentic Workflows](https://learn.microsoft.com/en-us/power-platform/release-plan/2025wave2/data-platfor | CODE |
| MEDIUM | instructions/vue.instructions.md | 86 | ## Provide / Inject (dependency injection) | COMMENT |
| MEDIUM | instructions/exclude-prompt-data.instructions.md | 35 | (the word `this` in `## this Title` is scaffolding, not heading text) | CODE |
| MEDIUM | plugins/external.json | 898 | "description": "Repo: https://github.com/arilivigni/gh-skills-builder\nThis plugin is for people that want to create | CODE |
| MEDIUM | …content/docs/learning-hub/creating-effective-skills.md | 310 | # scaffold-feature | COMMENT |
| MEDIUM | …/docs/learning-hub/using-automations-in-copilot-app.md | 101 | ## Practical guardrails | COMMENT |
| MEDIUM | …ing-hub/advanced-copilot-cli/05-add-feature-barcode.md | 39 | ## The agentic loop | COMMENT |
| MEDIUM | …g-hub/advanced-copilot-cli/07-manage-infrastructure.md | 69 | ### Start the databases and scaffold the server | COMMENT |
| MEDIUM | …ntent/docs/learning-hub/copilot-workshops/cli/index.md | 8 | **[GitHub Copilot CLI](https://docs.github.com/copilot/concepts/agents/about-copilot-cli)** puts GitHub Copilot in your | CODE |
| MEDIUM | agents/csharp-mcp-expert.agent.md | 9 | You are a world-class expert in building Model Context Protocol (MCP) servers using the C# SDK. You have deep knowledge | CODE |
| MEDIUM | agents/rug-orchestrator.agent.md | 198 | ### 5. Doing "just the orchestration logic" yourself | COMMENT |
| MEDIUM | agents/azure-verified-modules-owner-triage.agent.md | 138 | ### Concurrency guardrails | COMMENT |
| MEDIUM | docs/README.skills.md | 47 | | [api-breaking-change-detector](../skills/api-breaking-change-detector/SKILL.md)<br />`gh skills install github/awesome | CODE |
| MEDIUM | docs/README.agents.md | 135 | | [Meta Agentic Project Scaffold](../agents/meta-agentic-project-scaffold.agent.md)<br />[<br />[ are AI-powered repository automations that run coding agents in Git | CODE |
| MEDIUM | docs/README.workflows.md | 6 | See [CONTRIBUTING.md](../CONTRIBUTING.md#adding-agentic-workflows) for guidelines on how to contribute new workflows, im | CODE |
| MEDIUM | .github/plugin/marketplace.json | 1172 | "description": "Repo: https://github.com/arilivigni/gh-skills-builder\nThis plugin is for people that want to crea | CODE |
| MEDIUM | .github/workflows/agentics-maintenance.yml | 24 | # This file defines the generated agentic maintenance workflow for this repository. | COMMENT |
| MEDIUM | .github/agents/agentic-workflows.md | 45 | - Configuration: `https://raw.githubusercontent.com/github/gh-aw/main/.github/aw/github-agentic-workflows.md` | CODE |
| MEDIUM⚡ | .github/agents/agentic-workflows.md | 69 | **Prompt file**: `https://raw.githubusercontent.com/github/gh-aw/main/.github/aw/create-agentic-workflow.md` | CODE |
| MEDIUM⚡ | .github/agents/agentic-workflows.md | 79 | **Prompt file**: `https://raw.githubusercontent.com/github/gh-aw/main/.github/aw/update-agentic-workflow.md` | CODE |
| MEDIUM⚡ | .github/agents/agentic-workflows.md | 89 | **Prompt file**: `https://raw.githubusercontent.com/github/gh-aw/main/.github/aw/debug-agentic-workflow.md` | CODE |
| MEDIUM⚡ | .github/agents/agentic-workflows.md | 99 | **Prompt file**: `https://raw.githubusercontent.com/github/gh-aw/main/.github/aw/upgrade-agentic-workflows.md` | CODE |
| MEDIUM | .github/agents/agentic-workflows.md | 119 | **Prompt file**: `https://raw.githubusercontent.com/github/gh-aw/main/.github/aw/create-shared-agentic-workflow.md` | CODE |
| MEDIUM | .github/agents/agentic-workflows.md | 193 | # Initialize repository for agentic workflows | COMMENT |
| MEDIUM | .github/agents/agentic-workflows.md | 225 | - Always reference the instructions file at `https://raw.githubusercontent.com/github/gh-aw/main/.github/aw/github-agent | CODE |
| MEDIUM | skills/mini-context-graph/SKILL.md | 45 | # ===== INGEST WITH FULL RAG + WIKI ===== | COMMENT |
| MEDIUM⚡ | skills/mini-context-graph/scripts/contextgraph.py | 106 | # LLM Wiki + RAG methods — store raw content & provenance | COMMENT |
| MEDIUM | …lls/azure-architecture-autopilot/references/ai-data.md | 234 | ### RAG Chatbot | COMMENT |
| MEDIUM | …re-architecture-autopilot/references/phase1-advisor.md | 856 | ├── main.bicep # Main orchestration | CODE |
| MEDIUM | …e-architecture-autopilot/references/bicep-generator.md | 92 | ├── main.bicep # Main orchestration — module calls and parameter passing | CODE |
| MEDIUM | skills/daily-focus-board/references/customize.md | 22 | ## Optional — the "shared signals" bridge (for multi-agent workshop users) | COMMENT |
| MEDIUM | skills/github-actions-efficiency/SKILL.md | 40 | ### 2. Apply guardrails | COMMENT |
| MEDIUM | skills/mcp-security-audit/SKILL.md | 345 | - [OWASP ASI-02: Insecure Tool Use](https://owasp.org/www-project-agentic-ai-threats/) | CODE |
| MEDIUM | skills/phoenix-evals/references/evaluators-rag.md | 1 | # Evaluators: RAG Systems | COMMENT |
| MEDIUM | skills/phoenix-evals/references/evaluators-rag.md | 85 | ## RAG Failure Taxonomy | COMMENT |
| MEDIUM | …phoenix-evals/references/experiments-running-python.md | 35 | # With context (RAG) | COMMENT |
| MEDIUM | …lls/phoenix-evals/references/common-mistakes-python.md | 118 | # RIGHT for RAG evaluation — fetch child spans for retriever/LLM metrics | COMMENT |
| MEDIUM | skills/agent-owasp-compliance/SKILL.md | 321 | - [OWASP Agentic AI Threats](https://owasp.org/www-project-agentic-ai-threats/) | CODE |
| MEDIUM | skills/api-breaking-change-detector/SKILL.md | 3 | description: "Cross-references C# Web API controllers/DTOs against their TypeScript/JavaScript consumers (React, Angular | CODE |
| MEDIUM | skills/github-codespaces-efficiency/SKILL.md | 39 | ### 2. Apply guardrails | COMMENT |
| MEDIUM | skills/cli-mastery/references/module-4-agents.md | 36 | ## Agent orchestration patterns | COMMENT |
| MEDIUM | skills/arize-instrumentation/SKILL.md | 91 | - **Python frameworks:** [LangChain](https://arize.com/docs/ax/integrations/python-agent-frameworks/langchain), [LangGra | CODE |
| MEDIUM⚡ | skills/python-pypi-package-builder/scripts/scaffold.py | 740 | # Main scaffold | STRING |
| MEDIUM | skills/agent-architecture/references/source-map.md | 92 | | A5: exact execution guarantees | [Agents SDK guardrails](https://github.com/openai/openai-agents-python/blob/83c737fd0 | CODE |
| MEDIUM | skills/phoenix-tracing/references/annotations-python.md | 85 | ## RAG Pipeline Example | COMMENT |
| MEDIUM | …s/phoenix-tracing/references/annotations-typescript.md | 126 | ## RAG Pipeline Example | COMMENT |
| MEDIUM | skills/foundry-agent-sync/SKILL.md | 133 | ### Step 1 — Locate or scaffold the manifest | COMMENT |
| MEDIUM | skills/foundry-agent-sync/SKILL.md | 137 | ### Step 2 — Locate or scaffold the sync script | COMMENT |
| MEDIUM | skills/oo-component-documentation/SKILL.md | 48 | - LNG-001: **C#/.NET** - async/await, dependency injection, configuration, disposal, options patterns | CODE |
| MEDIUM | skills/rhino3d-scripts/SKILL.md | 40 | ### Python: minimal scaffold | COMMENT |
| MEDIUM | skills/rhino3d-scripts/SKILL.md | 72 | ### VBScript: minimal scaffold | COMMENT |
| MEDIUM | skills/azure-developer-cli/SKILL.md | 27 | ## Apply safety guardrails | COMMENT |
| 10 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …/copilot-sdk/python/recipe/pyinstaller_frozen_build.py | 42 | except Exception: | CODE |
| HIGH | …/copilot-sdk/python/recipe/pyinstaller_frozen_build.py | 81 | except ImportError: | CODE |
| HIGH | hooks/attester-import-check/check-imports.py | 119 | except OSError: | CODE |
| HIGH | skills/acquire-codebase-knowledge/scripts/scan.py | 317 | except Exception: | CODE |
| HIGH | skills/acquire-codebase-knowledge/scripts/scan.py | 533 | except Exception: | CODE |
| HIGH | skills/acquire-codebase-knowledge/scripts/scan.py | 222 | except (PermissionError, OSError): | CODE |
| HIGH | skills/acquire-codebase-knowledge/scripts/scan.py | 393 | except Exception: | CODE |
| HIGH | skills/acquire-codebase-knowledge/scripts/scan.py | 467 | except Exception: | CODE |
| HIGH | skills/acquire-codebase-knowledge/scripts/scan.py | 315 | except Exception: | CODE |
| HIGH | skills/acquire-codebase-knowledge/scripts/scan.py | 412 | except Exception: | CODE |
| HIGH | skills/acquire-codebase-knowledge/scripts/scan.py | 437 | except Exception: | CODE |
| HIGH | skills/acquire-codebase-knowledge/scripts/scan.py | 524 | except Exception: | CODE |
| HIGH | skills/acquire-codebase-knowledge/scripts/scan.py | 522 | except Exception: | CODE |
| HIGH | skills/code-tour/scripts/validate_tour.py | 112 | except Exception: | CODE |
| HIGH | skills/eyeball/tools/eyeball.py | 540 | except ImportError: | CODE |
| HIGH | skills/eyeball/tools/eyeball.py | 546 | except ImportError: | CODE |
| HIGH | skills/eyeball/tools/eyeball.py | 552 | except ImportError: | CODE |
| HIGH | skills/eyeball/tools/eyeball.py | 558 | except ImportError: | CODE |
| HIGH | skills/eyeball/tools/eyeball.py | 162 | except (subprocess.TimeoutExpired, FileNotFoundError): | CODE |
| HIGH | skills/eyeball/tools/eyeball.py | 201 | except Exception: | CODE |
| HIGH | skills/eyeball/tools/eyeball.py | 601 | except ImportError: | CODE |
| HIGH | skills/eyeball/tools/eyeball.py | 223 | except Exception: | CODE |
| HIGH | skills/eyeball/tools/eyeball.py | 228 | except Exception: | CODE |
| HIGH | skills/eyeball/tools/eyeball.py | 599 | except OSError: | CODE |
| HIGH | skills/publish-to-pages/scripts/convert-pptx.py | 48 | except: | CODE |
| HIGH | skills/publish-to-pages/scripts/convert-pptx.py | 63 | except: | CODE |
| HIGH | skills/publish-to-pages/scripts/convert-pptx.py | 111 | except: | CODE |
| HIGH | skills/publish-to-pages/scripts/convert-pptx.py | 88 | except: | CODE |
| HIGH | skills/publish-to-pages/scripts/convert-pptx.py | 153 | except: | CODE |
| HIGH | skills/publish-to-pages/scripts/convert-pdf.py | 27 | except: | CODE |
| HIGH | skills/agent-skill-stack/scripts/skill_index.py | 81 | except ValueError: | CODE |
| HIGH | skills/quality-playbook/quality_gate.py | 612 | except OSError: | CODE |
| HIGH | skills/quality-playbook/quality_gate.py | 678 | except OSError: | CODE |
| HIGH | skills/quality-playbook/quality_gate.py | 746 | except (OSError, PermissionError): | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ctions/dataverse-python-error-handling.instructions.md | 196 | except Exception as e: | CODE |
| MEDIUM | …ctions/dataverse-python-error-handling.instructions.md | 358 | print(f"Error Code: {error_code}") | CODE |
| MEDIUM | …ctions/dataverse-python-error-handling.instructions.md | 359 | print(f"Error Message: {error_message}") | CODE |
| LOW | …tions/dataverse-python-file-operations.instructions.md | 465 | except Exception as e: | CODE |
| LOW | …tions/dataverse-python-file-operations.instructions.md | 581 | except Exception as e: | CODE |
| LOW | …s/dataverse-python-real-world-usecases.instructions.md | 316 | except Exception as e: | CODE |
| LOW | …s/dataverse-python-real-world-usecases.instructions.md | 350 | except Exception as e: | CODE |
| LOW | …s/dataverse-python-real-world-usecases.instructions.md | 612 | except Exception as e: | CODE |
| LOW | …taverse-python-authentication-security.instructions.md | 338 | except Exception as e: | CODE |
| LOW | …taverse-python-authentication-security.instructions.md | 418 | except Exception as e: | CODE |
| LOW | …ctions/dataverse-python-best-practices.instructions.md | 623 | except Exception as e: | CODE |
| LOW | …ctions/dataverse-python-best-practices.instructions.md | 637 | except Exception as e: | CODE |
| LOW | …ctions/dataverse-python-best-practices.instructions.md | 643 | except Exception as e: | CODE |
| LOW | …ctions/dataverse-python-best-practices.instructions.md | 724 | except Exception: | CODE |
| LOW | …ons/dataverse-python-agentic-workflows.instructions.md | 507 | except Exception as e: | CODE |
| MEDIUM | instructions/copilot-sdk-python.instructions.md | 187 | print(f"Error: {event.data.message}") | CODE |
| LOW | instructions/copilot-sdk-python.instructions.md | 471 | except Exception as e: | STRING |
| MEDIUM | instructions/copilot-sdk-python.instructions.md | 472 | print(f"Error: {e}") | STRING |
| LOW | instructions/copilot-sdk-python.instructions.md | 690 | except Exception as e: | STRING |
| LOW | …averse-python-performance-optimization.instructions.md | 437 | except Exception as e: | CODE |
| LOW | …averse-python-performance-optimization.instructions.md | 464 | except Exception as e: | CODE |
| LOW | cookbook/copilot-sdk/python/pyinstaller-frozen-build.md | 33 | except Exception: | CODE |
| LOW | cookbook/copilot-sdk/python/error-handling.md | 36 | except Exception as e: | CODE |
| MEDIUM | cookbook/copilot-sdk/python/error-handling.md | 37 | print(f"Error: {e}") | CODE |
| LOW | cookbook/copilot-sdk/python/error-handling.md | 54 | except Exception as e: | CODE |
| LOW | cookbook/copilot-sdk/python/recipe/error_handling.py | 20 | except Exception as e: | CODE |
| MEDIUM | cookbook/copilot-sdk/python/recipe/error_handling.py | 21 | print(f"Error: {e}") | CODE |
| LOW | …/copilot-sdk/python/recipe/pyinstaller_frozen_build.py | 42 | except Exception: | CODE |
| LOW | hooks/attester-import-check/check-imports.py | 147 | except Exception: | CODE |
| LOW | hooks/attester-import-check/check-imports.py | 224 | except Exception: | CODE |
| MEDIUM | hooks/attester-import-check/check-imports.py | 171 | def main() -> int: | CODE |
| LOW | …/mini-context-graph/scripts/template_agent_workflow.py | 72 | except Exception as e: | CODE |
| LOW | …/mini-context-graph/scripts/template_agent_workflow.py | 103 | except Exception as e: | CODE |
| LOW | …/mini-context-graph/scripts/template_agent_workflow.py | 162 | except Exception as e: | CODE |
| MEDIUM | skills/acquire-codebase-knowledge/scripts/scan.py | 703 | print(f"Error: {e}", file=sys.stderr) | CODE |
| LOW⚡ | skills/acquire-codebase-knowledge/scripts/scan.py | 522 | except Exception: | CODE |
| LOW⚡ | skills/acquire-codebase-knowledge/scripts/scan.py | 524 | except Exception: | CODE |
| LOW⚡ | skills/acquire-codebase-knowledge/scripts/scan.py | 533 | except Exception: | CODE |
| LOW | skills/acquire-codebase-knowledge/scripts/scan.py | 258 | except Exception as e: | CODE |
| LOW | skills/acquire-codebase-knowledge/scripts/scan.py | 315 | except Exception: | CODE |
| LOW | skills/acquire-codebase-knowledge/scripts/scan.py | 317 | except Exception: | CODE |
| LOW | skills/acquire-codebase-knowledge/scripts/scan.py | 335 | except Exception: | CODE |
| LOW | skills/acquire-codebase-knowledge/scripts/scan.py | 356 | except Exception: | CODE |
| LOW | skills/acquire-codebase-knowledge/scripts/scan.py | 370 | except Exception: | CODE |
| LOW | skills/acquire-codebase-knowledge/scripts/scan.py | 393 | except Exception: | CODE |
| LOW | skills/acquire-codebase-knowledge/scripts/scan.py | 412 | except Exception: | CODE |
| LOW | skills/acquire-codebase-knowledge/scripts/scan.py | 437 | except Exception: | CODE |
| LOW | skills/acquire-codebase-knowledge/scripts/scan.py | 467 | except Exception: | CODE |
| LOW | skills/acquire-codebase-knowledge/scripts/scan.py | 702 | except Exception as e: | CODE |
| LOW | skills/poka-yoke/references/lang-python.md | 131 | except Exception: | CODE |
| LOW⚡ | skills/code-tour/scripts/validate_tour.py | 45 | except Exception: | CODE |
| LOW⚡ | skills/code-tour/scripts/validate_tour.py | 52 | except Exception: | CODE |
| LOW | skills/code-tour/scripts/validate_tour.py | 112 | except Exception: | CODE |
| LOW | skills/convert-pdf-to-md/scripts/convert_pdf_to_md.py | 112 | except Exception as exc: # noqa: BLE001 | CODE |
| LOW | skills/convert-pdf-to-md/scripts/convert_pdf_to_md.py | 126 | except Exception as exc: # noqa: BLE001 | CODE |
| LOW | skills/convert-pdf-to-md/scripts/convert_pdf_to_md.py | 138 | except Exception as exc: # noqa: BLE001 | CODE |
| LOW | skills/convert-pdf-to-md/scripts/convert_pdf_to_md.py | 154 | except Exception as exc: # noqa: BLE001 | CODE |
| LOW | skills/convert-pdf-to-md/scripts/convert_pdf_to_md.py | 215 | except Exception as exc: # noqa: BLE001 - surface any conversion error | CODE |
| LOW | …ptimize-simplicite-logs/scripts/simplicite-log2json.py | 100 | except Exception as e: | CODE |
| LOW | …ptimize-simplicite-logs/scripts/simplicite-log2json.py | 111 | except Exception as e: | CODE |
| 58 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | cookbook/copilot-sdk/python/accessibility-report.md | 0 | use the playwright mcp server to analyze the accessibility of this webpage: %s please: 1. navigate to the url using play | STRING |
| HIGH | cookbook/copilot-sdk/java/accessibility-report.md | 0 | use the playwright mcp server to analyze the accessibility of this webpage: %s please: 1. navigate to the url using play | STRING |
| HIGH | …kbook/copilot-sdk/java/recipe/AccessibilityReport.java | 0 | use the playwright mcp server to analyze the accessibility of this webpage: %s please: 1. navigate to the url using play | STRING |
| HIGH | cookbook/copilot-sdk/python/accessibility-report.md | 0 | based on the accessibility report you just generated for %s, create playwright accessibility tests in java. include test | STRING |
| HIGH | cookbook/copilot-sdk/java/accessibility-report.md | 0 | based on the accessibility report you just generated for %s, create playwright accessibility tests in java. include test | STRING |
| HIGH | …kbook/copilot-sdk/java/recipe/AccessibilityReport.java | 0 | based on the accessibility report you just generated for %s, create playwright accessibility tests in java. include test | STRING |
| HIGH | cookbook/copilot-sdk/python/managing-local-files.md | 0 | analyze the files in "{targetfolder}" and organize them into subfolders. 1. first, list all files and their metadata 2. | STRING |
| HIGH | …book/copilot-sdk/python/recipe/managing_local_files.py | 0 | analyze the files in "{targetfolder}" and organize them into subfolders. 1. first, list all files and their metadata 2. | STRING |
| HIGH | cookbook/copilot-sdk/dotnet/managing-local-files.md | 0 | analyze the files in "{targetfolder}" and organize them into subfolders. 1. first, list all files and their metadata 2. | STRING |
| HIGH | …book/copilot-sdk/dotnet/recipe/managing-local-files.cs | 0 | analyze the files in "{targetfolder}" and organize them into subfolders. 1. first, list all files and their metadata 2. | STRING |
| HIGH | cookbook/copilot-sdk/python/managing-local-files.md | 0 | analyze files in "{targetfolder}" and show me how you would organize them by file type. do not move any files - just sho | STRING |
| HIGH | cookbook/copilot-sdk/java/managing-local-files.md | 0 | analyze files in "{targetfolder}" and show me how you would organize them by file type. do not move any files - just sho | STRING |
| HIGH | cookbook/copilot-sdk/dotnet/managing-local-files.md | 0 | analyze files in "{targetfolder}" and show me how you would organize them by file type. do not move any files - just sho | STRING |
| HIGH | cookbook/copilot-sdk/python/managing-local-files.md | 0 | look at the files in "{targetfolder}" and suggest a logical organization. consider: - file names and what they might con | STRING |
| HIGH | cookbook/copilot-sdk/java/managing-local-files.md | 0 | look at the files in "{targetfolder}" and suggest a logical organization. consider: - file names and what they might con | STRING |
| HIGH | cookbook/copilot-sdk/dotnet/managing-local-files.md | 0 | look at the files in "{targetfolder}" and suggest a logical organization. consider: - file names and what they might con | STRING |
| HIGH | cookbook/copilot-sdk/python/pr-visualization.md | 0 | <context> you are analyzing pull requests for the github repository: {owner}/{reponame} the current working directory is | STRING |
| HIGH | cookbook/copilot-sdk/python/recipe/pr_visualization.py | 0 | <context> you are analyzing pull requests for the github repository: {owner}/{reponame} the current working directory is | STRING |
| HIGH | cookbook/copilot-sdk/java/pr-visualization.md | 0 | <context> you are analyzing pull requests for the github repository: {owner}/{reponame} the current working directory is | STRING |
| HIGH | cookbook/copilot-sdk/java/recipe/PRVisualization.java | 0 | <context> you are analyzing pull requests for the github repository: {owner}/{reponame} the current working directory is | STRING |
| HIGH | cookbook/copilot-sdk/dotnet/pr-visualization.md | 0 | <context> you are analyzing pull requests for the github repository: {owner}/{reponame} the current working directory is | STRING |
| HIGH | cookbook/copilot-sdk/dotnet/recipe/pr-visualization.cs | 0 | <context> you are analyzing pull requests for the github repository: {owner}/{reponame} the current working directory is | STRING |
| HIGH | cookbook/copilot-sdk/python/pr-visualization.md | 0 | fetch the open pull requests for {owner}/{reponame} from the last week. calculate the age of each pr in days. then gener | STRING |
| HIGH | cookbook/copilot-sdk/python/recipe/pr_visualization.py | 0 | fetch the open pull requests for {owner}/{reponame} from the last week. calculate the age of each pr in days. then gener | STRING |
| HIGH | cookbook/copilot-sdk/java/pr-visualization.md | 0 | fetch the open pull requests for {owner}/{reponame} from the last week. calculate the age of each pr in days. then gener | STRING |
| HIGH | cookbook/copilot-sdk/java/recipe/PRVisualization.java | 0 | fetch the open pull requests for {owner}/{reponame} from the last week. calculate the age of each pr in days. then gener | STRING |
| HIGH | cookbook/copilot-sdk/dotnet/pr-visualization.md | 0 | fetch the open pull requests for {owner}/{reponame} from the last week. calculate the age of each pr in days. then gener | STRING |
| HIGH | cookbook/copilot-sdk/dotnet/recipe/pr-visualization.cs | 0 | fetch the open pull requests for {owner}/{reponame} from the last week. calculate the age of each pr in days. then gener | STRING |
| HIGH | skills/convert-pdf-to-md/scripts/convert_pdf_to_md.py | 0 | import markitdown, failing with a clear, actionable message if absent. | STRING |
| HIGH | …lls/convert-excel-to-md/scripts/convert_excel_to_md.py | 0 | import markitdown, failing with a clear, actionable message if absent. | STRING |
| HIGH | skills/convert-word-to-md/scripts/convert_word_to_md.py | 0 | import markitdown, failing with a clear, actionable message if absent. | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …ctions/dataverse-python-error-handling.instructions.md | 226 | def call_with_exponential_backoff(func, *args, max_attempts=3, **kwargs): | CODE |
| LOW | …ctions/dataverse-python-error-handling.instructions.md | 269 | def bulk_create_with_error_tracking(client, table_name, payloads): | CODE |
| LOW | …tions/dataverse-python-file-operations.instructions.md | 426 | def generate_and_store_report(client, report_type, data): | CODE |
| LOW | …s/dataverse-python-real-world-usecases.instructions.md | 151 | def find_potential_duplicates(self, table_name: str, match_fields: list): | CODE |
| LOW | …s/dataverse-python-real-world-usecases.instructions.md | 291 | def enrich_accounts_with_industry_data(self): | CODE |
| LOW | …s/dataverse-python-real-world-usecases.instructions.md | 321 | def enrich_contacts_with_social_profiles(self): | CODE |
| LOW | …s/dataverse-python-real-world-usecases.instructions.md | 513 | def mark_accounts_as_inactive_if_no_activity(self, days_no_activity: int = 90): | CODE |
| LOW | …s/dataverse-python-real-world-usecases.instructions.md | 538 | def update_opportunity_status_based_on_amount(self): | CODE |
| LOW | instructions/playwright-python.instructions.md | 14 | - **Clarity**: Use descriptive test titles (e.g., def test_navigation_link_works():) that clearly state their intent. Ad | CODE |
| LOW | instructions/codexer.instructions.md | 137 | class UserDataProcessor: | CODE |
| LOW | …tions/self-explanatory-code-commenting.instructions.md | 97 | function calculateCompoundInterest(principal, rate, time, compoundFrequency = 1) { | CODE |
| LOW | …ons/dataverse-python-testing-debugging.instructions.md | 61 | def test_create_account_error(mock_client): | CODE |
| LOW | …ons/dataverse-python-testing-debugging.instructions.md | 198 | def test_create_and_retrieve_account(dataverse_client): | CODE |
| LOW | …ons/dataverse-python-testing-debugging.instructions.md | 374 | def test_bulk_create_performance(dataverse_client): | CODE |
| LOW | …ons/dataverse-python-testing-debugging.instructions.md | 413 | def test_retry_on_transient_error(mock_client): | CODE |
| LOW | …ons/dataverse-python-testing-debugging.instructions.md | 450 | def test_handles_missing_record(mock_client): | CODE |
| LOW | …averse-python-performance-optimization.instructions.md | 360 | def load_to_dataframe_chunked(client, table_name, chunk_size=10000): | CODE |
| LOW | …averse-python-performance-optimization.instructions.md | 422 | def create_with_consistency_check(client, table_name, payloads): | CODE |
| LOW⚡ | …ning-hub/cli-for-beginners/03-development-workflows.md | 474 | def test_add_book_creates_new_book(self): | CODE |
| LOW⚡ | …ning-hub/cli-for-beginners/03-development-workflows.md | 476 | def test_list_books_returns_all_books(self): | CODE |
| LOW⚡ | …ning-hub/cli-for-beginners/03-development-workflows.md | 480 | def test_find_book_by_title_case_insensitive(self): | CODE |
| LOW⚡ | …ning-hub/cli-for-beginners/03-development-workflows.md | 482 | def test_find_book_by_title_returns_none_when_not_found(self): | CODE |
| LOW⚡ | …ning-hub/cli-for-beginners/03-development-workflows.md | 484 | def test_find_by_author_partial_match(self): | CODE |
| LOW⚡ | …ning-hub/cli-for-beginners/03-development-workflows.md | 486 | def test_find_by_author_case_insensitive(self): | CODE |
| LOW⚡ | …ning-hub/cli-for-beginners/03-development-workflows.md | 490 | def test_add_book_with_empty_title(self): | CODE |
| LOW⚡ | …ning-hub/cli-for-beginners/03-development-workflows.md | 492 | def test_remove_nonexistent_book(self): | CODE |
| LOW⚡ | …ning-hub/cli-for-beginners/03-development-workflows.md | 494 | def test_mark_as_read_nonexistent_book(self): | CODE |
| LOW⚡ | …ning-hub/cli-for-beginners/03-development-workflows.md | 498 | def test_save_books_persists_to_json(self): | CODE |
| LOW⚡ | …ning-hub/cli-for-beginners/03-development-workflows.md | 500 | def test_load_books_handles_missing_file(self): | CODE |
| LOW⚡ | …ning-hub/cli-for-beginners/03-development-workflows.md | 502 | def test_load_books_handles_corrupted_json(self): | CODE |
| LOW⚡ | …ning-hub/cli-for-beginners/03-development-workflows.md | 506 | def test_add_book_with_unicode_characters(self): | CODE |
| LOW⚡ | …ning-hub/cli-for-beginners/03-development-workflows.md | 508 | def test_find_by_author_with_special_characters(self): | CODE |
| LOW | website/src/components/brand/navigation.ts | 26 | export function getAwesomeCopilotNavLinks( | CODE |
| LOW | website/src/components/brand/LearningArticleLayout.tsx | 168 | function LearningArticleLayoutBody({ | CODE |
| LOW | …ents/brand/learning-hub/CopilotConfigurationBasics.tsx | 21 | export default function CopilotConfigurationBasics() { | CODE |
| LOW | …nts/brand/learning-hub/WorkingWithCanvasExtensions.tsx | 166 | export default function WorkingWithCanvasExtensions() { | CODE |
| LOW | …ts/brand/learning-hub/UsingAutomationsInCopilotApp.tsx | 122 | export default function UsingAutomationsInCopilotApp() { | CODE |
| LOW | website/src/lib/learning-hub-article.ts | 122 | export function stripRedundantHeadingAnchors(html: string): string { | CODE |
| LOW | extensions/git-worktree-explorer/public/app.js | 283 | function renderCombinedBranchGraph() { | CODE |
| LOW | extensions/git-worktree-explorer/public/app.js | 599 | function focusSelectedGraphControl() { | CODE |
| LOW | extensions/git-worktree-explorer/public/app.js | 949 | function scheduleVisibleBranchReload() { | CODE |
| LOW | extensions/arcade-canvas/game/hud.js | 126 | function hasFullScreenInteractiveOverlay() { | CODE |
| LOW | extensions/arcade-canvas/game/scenes/GalaxyBlaster.js | 17 | function generatePointsOnBezierCurve(points, numOfPoints) { | CODE |
| LOW | extensions/pr-artifact-explorer/assets/app.js | 520 | function reportPullFilterStorageError(error) { | CODE |
| LOW | extensions/pr-artifact-explorer/assets/app.js | 531 | function normalizePullFilterPreference(value) { | CODE |
| LOW | extensions/pr-artifact-explorer/assets/app.js | 564 | function writeLocalPullFilterPreference(repository, preference) { | CODE |
| LOW | extensions/pr-artifact-explorer/assets/app.js | 585 | function savedPullFilterPreference(repository) { | CODE |
| LOW | extensions/pr-artifact-explorer/assets/app.js | 600 | function persistPullFilterPreferenceClient(repository, value) { | CODE |
| LOW | extensions/pr-artifact-explorer/assets/app.js | 702 | function setBreadcrumbOverflowOpen(open, focusFirst = false) { | CODE |
| LOW | extensions/pr-artifact-explorer/assets/app.js | 1486 | function setPullQuerySuggestionsOpen(input, open) { | CODE |
| LOW | extensions/pr-artifact-explorer/assets/app.js | 1504 | function renderPullQuerySuggestions(input, { preserveIndex = false } = {}) { | CODE |
| LOW | extensions/pr-artifact-explorer/assets/app.js | 1573 | function insertPullQuerySuggestion(input, index = pullQuerySuggestionIndex) { | CODE |
| LOW | extensions/pr-artifact-explorer/assets/app.js | 2052 | function artifactFilterControlsHtml(artifacts) { | CODE |
| LOW | extensions/pr-artifact-explorer/assets/app.js | 2067 | function renderArtifactFilterControls() { | CODE |
| LOW | extensions/pr-artifact-explorer/assets/app.js | 2074 | function setArtifactFilterPanelOpen(kind, open) { | CODE |
| LOW | extensions/pr-artifact-explorer/assets/app.js | 2222 | function progressivePullRequestPath( | CODE |
| LOW | extensions/pr-artifact-explorer/assets/app.js | 2236 | function requestInitialPullPayload(requestPath, { force = false } = {}) { | CODE |
| LOW | extensions/pr-artifact-explorer/assets/app.js | 2384 | function pullFilterPreferenceForRoute(route, payload) { | CODE |
| LOW | extensions/pr-artifact-explorer/assets/app.js | 2393 | async function persistPullListPreferences(route, payload) { | CODE |
| LOW | extensions/pr-artifact-explorer/assets/app.js | 2507 | async function continueProgressivePullList( | CODE |
| 58 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | …ctions/dataverse-python-error-handling.instructions.md | 179 | from azure.core.exceptions import AzureError | CODE |
| CRITICAL | …onvert-cassandra-to-spring-data-cosmos.instructions.md | 867 | **Error**: `java.lang.NoSuchMethodError: 'boolean io.netty.channel.epoll.Epoll.isTcpFastOpenClientSideAvailable()'` | CODE |
| CRITICAL | …onvert-cassandra-to-spring-data-cosmos.instructions.md | 873 | **Error**: `java.lang.NoSuchMethodError: 'boolean io.netty.internal.tcnative.SSLContext.setCurvesList(long, java.lang.St | CODE |
| CRITICAL | …ions/convert-jpa-to-spring-data-cosmos.instructions.md | 275 | return new org.springframework.security.core.userdetails.User(user.getLogin(), user.getPassword(), grantedAuthorit | CODE |
| CRITICAL | …taverse-python-authentication-security.instructions.md | 346 | from azure.core.exceptions import ClientAuthenticationError | CODE |
| CRITICAL | agents/dotnet-maui.agent.md | 110 | Microsoft.Maui.Handlers.ButtonHandler.Mapper.AppendToMapping("Custom", (handler, view) => | CODE |
| CRITICAL | skills/salesforce-component-standards/SKILL.md | 154 | if (!Schema.sObjectType.Account.fields.Revenue__c.isAccessible()) { | CODE |
| CRITICAL | skills/salesforce-apex-quality/SKILL.md | 55 | if (!Schema.sObjectType.Contact.fields.Email.isAccessible()) { | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | instructions/copilot-sdk-go.instructions.md | 392 | APIKey: "your-api-key", | CODE |
| HIGH | …s/dataverse-python-real-world-usecases.instructions.md | 380 | api_key="your-api-key" | CODE |
| HIGH | instructions/copilot-sdk-python.instructions.md | 427 | "api_key": "your-api-key" | STRING |
| HIGH | instructions/copilot-sdk-nodejs.instructions.md | 412 | apiKey: "your-api-key", | CODE |
| HIGH | instructions/copilot-sdk-csharp.instructions.md | 375 | ApiKey = "your-api-key" | CODE |
| HIGH | plugins/flowstudio-power-automate/README.md | 59 | "headers": { "x-api-key": "<YOUR_TOKEN>" } | CODE |
| HIGH | skills/phoenix-cli/SKILL.md | 56 | export PHOENIX_API_KEY=your-api-key # if auth is enabled | CODE |
| HIGH | skills/make-blog-post/SKILL.md | 147 | 1. **No credentials or secure data.** No API keys, tokens, passwords, secrets, connection strings, private URLs, interna | CODE |
| HIGH | skills/phoenix-tracing/references/setup-typescript.md | 41 | export PHOENIX_API_KEY="your-api-key" | CODE |
| HIGH | skills/phoenix-tracing/references/setup-python.md | 34 | export PHOENIX_API_KEY="your-api-key" # Required for Phoenix Cloud | CODE |
| HIGH⚡ | skills/security-review/references/secret-patterns.md | 170 | "your-api-key-here" | CODE |
| HIGH⚡ | skills/security-review/references/secret-patterns.md | 171 | "<YOUR_API_KEY>" | CODE |
| HIGH⚡ | skills/security-review/references/secret-patterns.md | 171 | "<YOUR_API_KEY>" | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …tions/self-explanatory-code-commenting.instructions.md | 101 | COMMENT | |
| LOW | …ng-hub/cli-for-beginners/07-putting-it-all-together.md | 81 | # Pytest-helper agent produces: | COMMENT |
| LOW | agents/aem-frontend-specialist.agent.md | 281 | # STEP 2: Extract design tokens and variables | COMMENT |
| LOW | agents/spark-performance.agent.md | 61 | ### step 5.1 After Every Review, CREATE: | COMMENT |
| LOW | cookbook/copilot-sdk/python/managing-local-files.md | 81 | # Groups files like: | COMMENT |
| LOW | cookbook/copilot-sdk/dotnet/managing-local-files.md | 81 | // documents/ -> .pdf, .docx, .txt | COMMENT |
| LOW | cookbook/copilot-sdk/dotnet/recipe/ralph-loop.cs | 1 | #:package GitHub.Copilot.SDK@* | COMMENT |
| LOW | extensions/arcade-canvas/game/hud.js | 1 | // ── HUD Logic ── | COMMENT |
| LOW | hooks/tool-guardian/guard-tool.sh | 1 | #!/bin/bash | COMMENT |
| LOW | hooks/fix-broken-links/link-fix.sh | 1 | #!/bin/bash | COMMENT |
| LOW | hooks/secrets-scanner/scan-secrets.sh | 1 | #!/bin/bash | COMMENT |
| LOW | hooks/dependency-license-checker/check-licenses.sh | 1 | #!/bin/bash | COMMENT |
| LOW | .github/review-routing.yml | 1 | # Review routing configuration — single source of truth for reviewer pools. | COMMENT |
| LOW | .github/submission-gate.yml | 1 | # Submission gate configuration. | COMMENT |
| LOW | .github/submission-gate.yml | 21 | # optional true: skip silently when the check never reports (pluggable slot). | COMMENT |
| LOW | .github/risk-tiers.yml | 1 | # Merge risk tiers. | COMMENT |
| LOW | .github/workflows/copilot-workshops-sync.lock.yml | 1 | # gh-aw-metadata: {"schema_version":"v4","frontmatter_hash":"108ab49b9f7ff64384b1684e4dbb96b2ed20248f7ce44aadd105412ad34 | COMMENT |
| LOW | .github/workflows/copilot-workshops-sync.lock.yml | 21 | # gh aw compile | COMMENT |
| LOW | .github/workflows/copilot-workshops-sync.lock.yml | 41 | # - actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 | COMMENT |
| LOW | .github/workflows/pr-duplicate-check.lock.yml | 1 | # gh-aw-metadata: {"schema_version":"v4","frontmatter_hash":"c4bf579582c4086263bafa20678ed2875220919d340720656d7a7511f0e | COMMENT |
| LOW | .github/workflows/pr-duplicate-check.lock.yml | 21 | # gh aw compile | COMMENT |
| LOW | .github/workflows/pr-duplicate-check.lock.yml | 41 | # - actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 | COMMENT |
| LOW | .github/workflows/review-routing.yml | 1 | name: Review Routing | COMMENT |
| LOW | .github/workflows/resource-staleness-report.lock.yml | 1 | # gh-aw-metadata: {"schema_version":"v4","frontmatter_hash":"a276346e940845d80268364dbe61d619c85bed897f4d4372ac58bac4781 | COMMENT |
| LOW | .github/workflows/resource-staleness-report.lock.yml | 21 | # gh aw compile | COMMENT |
| LOW | .github/workflows/cli-for-beginners-sync.lock.yml | 1 | # gh-aw-metadata: {"schema_version":"v4","frontmatter_hash":"e3f2550d5791d43527217e604df3e07ee4354209a733e4beb18b02213af | COMMENT |
| LOW | .github/workflows/cli-for-beginners-sync.lock.yml | 21 | # gh aw compile | COMMENT |
| LOW | .github/workflows/cli-for-beginners-sync.lock.yml | 41 | # - actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 | COMMENT |
| LOW | .github/workflows/review-escalation.yml | 1 | name: Review Escalation | COMMENT |
| LOW | .github/workflows/duplicate-resource-detector.lock.yml | 1 | # gh-aw-metadata: {"schema_version":"v4","frontmatter_hash":"a9f23f276f50c5d0ec075a2f482d2ef43d6cb7b3c7042624a461017cb9a | COMMENT |
| LOW | .github/workflows/duplicate-resource-detector.lock.yml | 21 | # gh aw compile | COMMENT |
| LOW | .github/workflows/pr-quality-signal.lock.yml | 1 | # gh-aw-metadata: {"schema_version":"v4","frontmatter_hash":"93ef1d9ca18162d5f45920d2d36e003b3c6ed515d495c49e900c93e6f45 | COMMENT |
| LOW | .github/workflows/pr-quality-signal.lock.yml | 21 | # gh aw compile | COMMENT |
| LOW | .github/workflows/learning-hub-updater.lock.yml | 1 | # gh-aw-metadata: {"schema_version":"v4","frontmatter_hash":"749ef855d0a0f2b66d06cac516fddc44b276a5bff497d69596f37969784 | COMMENT |
| LOW | .github/workflows/learning-hub-updater.lock.yml | 21 | # gh aw compile | COMMENT |
| LOW | .github/workflows/learning-hub-updater.lock.yml | 41 | # - actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 | COMMENT |
| LOW | .github/workflows/advanced-copilot-cli-sync.lock.yml | 1 | # gh-aw-metadata: {"schema_version":"v4","frontmatter_hash":"99a10a2c42fa7fe2930ebecc07150ddd2b2b9389636281a10588d2d769d | COMMENT |
| LOW | .github/workflows/advanced-copilot-cli-sync.lock.yml | 21 | # gh aw compile | COMMENT |
| LOW | .github/workflows/advanced-copilot-cli-sync.lock.yml | 41 | # - actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 | COMMENT |
| LOW | .github/workflows/app-for-beginners-sync.lock.yml | 1 | # gh-aw-metadata: {"schema_version":"v4","frontmatter_hash":"5947da0f5826c9acecfd6519b3b1336023c52d9144e74596562f60a9438 | COMMENT |
| LOW | .github/workflows/app-for-beginners-sync.lock.yml | 21 | # gh aw compile | COMMENT |
| LOW | .github/workflows/app-for-beginners-sync.lock.yml | 41 | # - actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | COMMENT |
| LOW | .github/workflows/app-for-beginners-sync.lock.yml | 921 | # --allow-tool shell(date) | COMMENT |
| LOW | .github/workflows/agentics-maintenance.yml | 1 | # This file was automatically generated by pkg/workflow/maintenance_workflow.go (v0.89.21). DO NOT EDIT. To debug this w | COMMENT |
| LOW | .github/workflows/agentics-maintenance.yml | 21 | # | COMMENT |
| LOW | skills/react-audit-grep-patterns/SKILL.md | 21 | # Standard flags used throughout: | COMMENT |
| LOW | skills/arize-experiment/SKILL.md | 261 | user_input = ex.get("input") or ex.get("question") or ex.get("prompt") or str(ex) | COMMENT |
| LOW | skills/arize-experiment/SKILL.md | 281 | # ) | COMMENT |
| LOW | …python-pypi-package-builder/references/tooling-ruff.md | 321 | # 1. Remove black and isort from dev dependencies | COMMENT |
| LOW | skills/eval-driven-dev/resources/setup.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | skills/roslyn-analyzers/references/SourceWriter.cs | 1 | // Copyright (c) Microsoft Corporation. All rights reserved. | COMMENT |
| LOW | skills/roslyn-analyzers/references/SourceWriter.cs | 61 | /// </summary> | COMMENT |
| LOW | skills/roslyn-analyzers/references/SourceWriter.cs | 121 | public SourceWriter Write([StringSyntax("c#-test")] string text) | COMMENT |
| LOW | skills/roslyn-analyzers/references/SourceWriter.cs | 201 | /// <summary> | COMMENT |
| LOW | skills/flowstudio-power-automate-debug/SKILL.md | 121 | # {"actionName": "HTTP_find_AD_User_by_Name", "status": "Failed", | COMMENT |
| LOW | skills/containerize-aspnet-framework/SKILL.md | 241 | COMMENT | |
| LOW | skills/containerize-aspnet-framework/SKILL.md | 261 | # - 4.8-windowsservercore-ltsc2019 (Windows Server 2019) | COMMENT |
| LOW | skills/containerize-aspnet-framework/SKILL.md | 301 | /p:PublishUrl=C:\publish ` | COMMENT |
| LOW | skills/containerize-aspnet-framework/SKILL.md | 321 | # - 3.5-windowsservercore-ltsc2025 (Windows Server 2025) | COMMENT |
| LOW | skills/containerize-aspnet-framework/SKILL.md | 341 | # RUN Start-Process -Wait -FilePath 'msiexec.exe' -ArgumentList '/i', 'C:\Installers\your-package.msi', '/quiet', '/nore | COMMENT |
| 11 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | instructions/use-cliche-data-in-docs.instructions.md | 116 | name: 'Acme Corp', | CODE |
| LOW | instructions/use-cliche-data-in-docs.instructions.md | 131 | "user": "admin@example.com", | CODE |
| LOW | instructions/copilot-sdk-go.instructions.md | 629 | Name: "John Doe", | CODE |
| LOW⚡ | …s/dataverse-python-real-world-usecases.instructions.md | 714 | account_id = app.create_account("Acme Inc", "555-0100") | CODE |
| LOW⚡ | …s/dataverse-python-real-world-usecases.instructions.md | 714 | account_id = app.create_account("Acme Inc", "555-0100") | CODE |
| LOW⚡ | …s/dataverse-python-real-world-usecases.instructions.md | 721 | app.update_account(account_id, telephone1="555-0199") | CODE |
| LOW | …ctions/dataverse-python-best-practices.instructions.md | 167 | "telephone1": "555-0100", | CODE |
| LOW | …ons/dataverse-python-testing-debugging.instructions.md | 89 | "name": "Acme Inc", | CODE |
| LOW | …ons/dataverse-python-testing-debugging.instructions.md | 90 | "telephone1": "555-0100", | CODE |
| LOW | …ons/dataverse-python-testing-debugging.instructions.md | 241 | dataverse_client.update("account", test_account, {"telephone1": "555-0100"}) | CODE |
| LOW | …ons/dataverse-python-testing-debugging.instructions.md | 244 | assert account["telephone1"] == "555-0100" | CODE |
| LOW | …uctions/dataverse-python-api-reference.instructions.md | 48 | client.update("account", "guid-here", {"telephone1": "555-0100"}) | CODE |
| LOW | instructions/copilot-sdk-python.instructions.md | 629 | name="John Doe", | STRING |
| LOW | …ompt-engineering-safety-best-practices.instructions.md | 737 | is_valid_email("user@example.com") # Should return True | CODE |
| LOW | instructions/copilot-sdk-nodejs.instructions.md | 652 | name: "John Doe", | CODE |
| LOW⚡ | instructions/dataverse-python-sdk.instructions.md | 36 | account_id = client.create("account", {"name": "Acme, Inc.", "telephone1": "555-0100"})[0] | CODE |
| LOW⚡ | instructions/dataverse-python-sdk.instructions.md | 42 | client.update("account", account_id, {"telephone1": "555-0199"}) | CODE |
| LOW⚡ | instructions/dataverse-python-sdk.instructions.md | 52 | client.update("account", ids, {"telephone1": "555-0200"}) | CODE |
| LOW⚡ | instructions/dataverse-python-sdk.instructions.md | 55 | client.update("account", ids, [{"telephone1": "555-1200"}, {"telephone1": "555-1300"}]) | CODE |
| LOW | …/power-bi-data-modeling-best-practices.instructions.md | 296 | CustomerName: "John Doe", "John Smith", "Jane Doe", "Bob Johnson" | CODE |
| LOW | …/power-bi-data-modeling-best-practices.instructions.md | 296 | CustomerName: "John Doe", "John Smith", "Jane Doe", "Bob Johnson" | CODE |
| LOW⚡ | …averse-python-performance-optimization.instructions.md | 152 | {"telephone1": "555-0100"}, | CODE |
| LOW⚡ | …averse-python-performance-optimization.instructions.md | 153 | {"telephone1": "555-0200"}, | CODE |
| LOW⚡ | …averse-python-performance-optimization.instructions.md | 154 | {"telephone1": "555-0300"}, | CODE |
| LOW | instructions/copilot-sdk-csharp.instructions.md | 560 | Name = "John Doe", | CODE |
| LOW | instructions/copilot-sdk-java.instructions.md | 799 | new UserInfo(userId, "John Doe", "john@example.com", "Developer") | STRING |
| LOW | website/src/components/brand/SyntaxHighlightedCode.tsx | 13 | | "placeholder" | CODE |
| LOW | website/src/components/brand/SyntaxHighlightedCode.tsx | 34 | { kind: "placeholder", expression: /<[\w.*-]+>/y }, | CODE |
| LOW | website/src/components/brand/SyntaxHighlightedCode.tsx | 80 | { kind: "placeholder", expression: /<[\w.*-]+>/y }, | CODE |
| LOW | agents/react18-test-guardian.agent.md | 283 | expect(screen.getByText('John Doe')).toBeInTheDocument(); | CODE |
| LOW | skills/gdpr-compliant/references/data-rights.md | 47 | "email": "user@example.com", | CODE |
| LOW | skills/batch-files/SKILL.md | 223 | call :greet "Jane Doe" | CODE |
| LOW | skills/markdown-to-html/references/hugo.md | 184 | author = 'John Doe' | CODE |
| LOW | skills/markdown-to-html/references/hugo.md | 200 | author = 'John Doe' | CODE |
| LOW | skills/spring-boot-testing/references/mockmvc-tester.md | 90 | assertThat(response.getCustomer().getName()).isEqualTo("John Doe"); | CODE |
| LOW | …ills/spring-boot-testing/references/mockmvc-classic.md | 109 | .andExpect(jsonPath("$.customer.name").value("John Doe")) | CODE |
| LOW | skills/gen-specs-as-issues/SKILL.md | 29 | - Identify "placeholder" code that lacks real functionality | CODE |
| LOW | skills/azure-devops-cli/references/advanced-usage.md | 97 | az repos pr list --query "[?contains(reviewers[?displayName=='John Doe'].displayName, 'John Doe')]" | CODE |
| LOW | …/azure-devops-cli/references/workflows-and-patterns.md | 583 | # Usage: bulk_update_work_items "SELECT ID FROM WorkItems WHERE State='New'" --state "Active" --assigned-to "user@exampl | COMMENT |
| LOW | skills/power-platform-architect/SKILL.md | 99 | NOTE: In your architecture recommendation you *should* include *users*! Because the human users of this system is going | CODE |
| LOW | skills/cosmosdb-datamodeling/SKILL.md | 196 | "name": "John Doe", | CODE |
| LOW | skills/cosmosdb-datamodeling/SKILL.md | 470 | "customerName": "John Doe" // Include customer name to avoid lookup | CODE |
| LOW | skills/cosmosdb-datamodeling/SKILL.md | 665 | "name": "John Doe", | CODE |
| LOW | skills/phoenix-tracing/references/span-retriever.md | 53 | "author": "Jane Doe", | CODE |
| LOW | skills/resemble-detect/references/api-reference.md | 219 | "name": "Jane Doe" | CODE |
| LOW | skills/resemble-detect/references/api-reference.md | 237 | { "uuid": "...", "name": "Jane Doe", "confidence": 0.92, "distance": 0.08 } | CODE |
| LOW | …lls/react18-enzyme-to-rtl/references/async-patterns.md | 55 | expect(wrapper.find('.user-name').text()).toBe('John Doe'); | CODE |
| LOW | …lls/react18-enzyme-to-rtl/references/async-patterns.md | 68 | expect(await screen.findByText('John Doe')).toBeInTheDocument(); | CODE |
| LOW | …lls/react18-enzyme-to-rtl/references/enzyme-api-map.md | 185 | target: { value: 'user@example.com' } | CODE |
| LOW | …lls/react18-enzyme-to-rtl/references/enzyme-api-map.md | 194 | email: 'user@example.com', | CODE |
| LOW | …lls/react18-enzyme-to-rtl/references/enzyme-api-map.md | 212 | await user.type(screen.getByLabelText(/email/i), 'user@example.com'); | CODE |
| LOW | …lls/react18-enzyme-to-rtl/references/enzyme-api-map.md | 219 | email: 'user@example.com', | CODE |
| LOW | skills/security-review/references/secret-patterns.md | 103 | - Lorem ipsum text | CODE |
| LOW | skills/refactor/SKILL.md | 207 | - sendEmail('user@example.com', 'Hello', '...'); | CODE |
| LOW | skills/refactor/SKILL.md | 234 | + const email = Email.create('user@example.com'); | CODE |
| LOW | skills/refactor/SKILL.md | 235 | + const phone = new PhoneNumber('1', '555-1234'); | CODE |
| LOW⚡ | skills/quality-playbook/quality_gate.py | 640 | return "placeholder" | CODE |
| LOW | skills/quality-playbook/quality_gate.py | 966 | elif status == "placeholder": | CODE |
| LOW | skills/quality-playbook/quality_gate.py | 1150 | elif status == "placeholder": | CODE |
| LOW | skills/quality-playbook/quality_gate.py | 1225 | elif status == "placeholder": | CODE |
| 3 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | instructions/exclude-prompt-data.instructions.md | 32 | (`"// Added email validation as requested"`, | CODE |
| HIGH | instructions/exclude-prompt-data.instructions.md | 129 | // Added email validation as requested in the prompt | COMMENT |
| HIGH | plugins/doublecheck/README.md | 92 | - Before acting on legal analysis, case citations, or regulatory guidance generated by AI | CODE |
| HIGH | …ing-hub/copilot-workshops/app/4-custom-instructions.md | 64 | > Because instructions files have a large impact on the code generated by Copilot, care should be taken in ensuring they | CODE |
| HIGH | …cs/learning-hub/copilot-workshops/app/3-agent-modes.md | 43 | By sticking to this standard approach you ensure the code generated by AI meets the requirements set forth, and goes thr | CODE |
| HIGH | …/learning-hub/copilot-workshops/vscode/2-agent-mode.md | 21 | - to review changes and tests generated by Copilot Agent Mode before merging into your codebase. | CODE |
| HIGH | …/learning-hub/copilot-workshops/vscode/2-agent-mode.md | 177 | - to review changes and tests generated by Copilot Agent Mode before merging into your codebase. | CODE |
| HIGH | …nt/docs/learning-hub/copilot-workshops/vscode/3-mcp.md | 146 | 6. Select the link generated by Copilot to review your pull request, but please **don't merge it yet**. | CODE |
| HIGH | agents/expert-embedded-c-engineer.agent.md | 67 | - Don't edit auto-generated code (RTE files, MCAL configuration, tool-generated headers). | CODE |
| HIGH | agents/CSharpExpert.agent.md | 33 | - Don't edit auto-generated code (`/api/*.cs`, `*.g.cs`, `// <auto-generated>`). | CODE |
| HIGH | docs/README.agents.md | 85 | | [Doublecheck](../agents/doublecheck.agent.md)<br />[ | COMMENT |
| LOW | skills/speak-summary/scripts/tts.sh | 14 | # Set SPEAK_TTS_BIN to point at a specific pocket-tts binary to skip all this. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …cli-for-beginners/04-agents-and-custom-instructions.md | 268 | Search for books within a specified year range. Args: books: List of book dictionaries start_y | STRING |
| HIGH | …on-pypi-package-builder/references/library-patterns.md | 341 | Process data and return results. Args: data: Input dictionary to process. Returns | STRING |
| HIGH | skills/python-pypi-package-builder/scripts/scaffold.py | 278 | \ from __future__ import annotations from {mod}.exceptions import YourPackageError class YourClient: """ Main | STRING |
| HIGH | …-diagram-generator/scripts/split-excalidraw-library.py | 52 | Find the .excalidrawlib file in the given directory. Args: directory: Directory to search Returns | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | skills/mini-context-graph/scripts/contextgraph.py | 140 | # Step 1: Store raw document and auto-chunk | COMMENT |
| LOW | skills/mini-context-graph/scripts/contextgraph.py | 164 | # Step 2: Ingest entities with provenance | COMMENT |
| LOW | skills/mini-context-graph/scripts/contextgraph.py | 182 | # Step 3: Ingest relations with provenance | COMMENT |
| LOW⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 1734 | // Step 1: map each node to its containing group box | COMMENT |
| LOW⚡ | …ills/azure-architecture-autopilot/scripts/generator.py | 1750 | // Step 2: identify channels between group pairs + assign slot offsets | COMMENT |
| LOW | …ills/azure-architecture-autopilot/scripts/generator.py | 1780 | // Step 3: sort edges within each channel and assign slot offsets | COMMENT |
| LOW | skills/sandbox-npm-install/scripts/install.sh | 93 | # Step 1: Prepare local deps directory | COMMENT |
| LOW⚡ | skills/sandbox-npm-install/scripts/install.sh | 119 | # Step 2: Install on local ext4 | COMMENT |
| LOW⚡ | skills/sandbox-npm-install/scripts/install.sh | 123 | # Step 3: Symlink into workspace | COMMENT |
| LOW | skills/sandbox-npm-install/scripts/install.sh | 150 | # Step 4: Verify native binaries when present in this project | COMMENT |
| LOW | skills/sandbox-npm-install/scripts/install.sh | 175 | # Step 5: Optionally install Playwright | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | cookbook/cookbook.yml | 3 | # This file defines the structure of cookbooks and recipes for the Samples page | COMMENT |
| MEDIUM | .github/submission-gate.yml | 8 | # This file is a review-policy file: changing it places a PR in merge-risk:high. | COMMENT |
| MEDIUM | .github/risk-tiers.yml | 18 | # This file is a review-policy file: changing it places a PR in merge-risk:high. | COMMENT |
| MEDIUM | .github/workflows/agentics-maintenance.yml | 24 | # This file defines the generated agentic maintenance workflow for this repository. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | plugins/csharp-dotnet-development/plugin.json | 4 | "description": "Essential prompts, instructions, and chat modes for C# and .NET development including testing, documen | CODE |
| MEDIUM | …ugins/openapi-to-application-csharp-dotnet/plugin.json | 4 | "description": "Generate production-ready .NET applications from OpenAPI specifications. Includes ASP.NET Core project | CODE |
| MEDIUM | .github/plugin/marketplace.json | 760 | "description": "Essential prompts, instructions, and chat modes for C# and .NET development including testing, doc | CODE |
| MEDIUM | .github/plugin/marketplace.json | 1629 | "description": "Generate production-ready .NET applications from OpenAPI specifications. Includes ASP.NET Core pro | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | agents/aws-cloud-expert.agent.md | 59 | - **Show working code**: Provide complete, runnable CDK stacks or SAM templates — never stub with `# TODO: implement` | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | skills/python-pypi-package-builder/scripts/scaffold.py | 268 | __all__ = [ | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | skills/datanalysis-credit-risk/references/analysis.py | 972 | CODE |