Build agentic applications with GitHub Copilot SDK. Use when embedding AI agents in apps, creating custom tools, implementing streaming responses, managing sessions, connecting to MCP servers, or creating custom agents. Triggers on Copilot SDK, GitHub SDK, agentic app, embed Copilot, programmable agent, MCP server, custom agent.
- Stars
- 291
- Version
- v1
- Copies
- 0
Overview
Waxell's checks found 2 findings to review, highest severity high.
- Highest severity
- high
- Findings
- 2
- What ran
- Static analysis
A clean result means nothing alarming in what is published, not a guarantee. How the checks work
We don't republish the skill's instructions. Read them on GitHub at the reviewed commit.
Security
Security scan
Checked 2 days ago
Result
Review findings Waxell's checks found 2 findings to review, highest severity high.
Checked with static analysis: servers it launches, packages it installs at runtime, scripts piped to a shell and bundled binaries. Nothing was run. How the checks work
Findings (2)
high · 2
- high
Tells Claude to install unpinned packages (@github/copilot-sdk, tsx)
SKILL.md:27 · skill_risk:S2
- high
Tells Claude to install unpinned packages (github-copilot-sdk)
SKILL.md:32 · skill_risk:S2
Versions
Version history
Each distinct content we have seen, newest first, with the verdict it got at the time.
One version so far: v1, seen 2026-11-03.
See and control which skills your people use
Inside your organization, Waxell scans each skill and plugin before anyone installs it, approves what passes and publishes it to a private marketplace, and puts every MCP tool call behind one governed URL.
30 minutes. No commitment.
SOC 2 Type II attested · ISO/IEC 27001:2022 certified · HIPAA with a BAA · aligned to the EU AI Act and NIST AI RMF
More engineering skills and plugins
- google-workspace-clihoodiniInteract with all Google Workspace APIs via the gws CLI. Use when managing Drive files, sending/reading Gmail, creating Calendar events,… Review findingsEngineeringAI & agents291
- local-llm-routerhoodiniRoute AI coding queries to local LLMs in air-gapped networks. Integrates Serena MCP for semantic code understanding. Use when working… High riskEngineeringData & analytics291
- vercelhoodiniDeploy and configure applications on Vercel. Use when deploying Next.js apps, configuring serverless functions, setting up edge functions,… Review findingsEngineeringProductivity291
github-readme-generatorwwwzhouhuiGenerate professional GitHub project README.md with standard structure including project intro, features, installation, usage,… Review findingsEngineeringData & analytics289