mirror of
https://github.com/github/awesome-copilot.git
synced 2026-09-09 01:05:35 +00:00
Ports four corrections these two skills received upstream after a second trial run against a real repository. #2951 merged the snapshot taken before them. The bundled scripts are already identical to their upstream versions and are not touched here. 1. Neither skill told the agent that text read out of the audited repository is data rather than instruction. These skills exist to read untrusted repositories, so a README, a code comment, a commit message or a dependency manifest reached the model with no framing -- and a line claiming a file is approved, or telling the audit to skip a module, reads exactly like a guardrail. Both skills now carry the rule and report such text as a finding instead of following it. 2. The citation rule allowed anchors to land beside the symbol rather than on it: the blank line above a definition, a decorator, or a line inside a multi-line literal. In one trialled file every anchor sat two lines above the def it named. The rule is now a single applicable test -- the line you cite must literally contain the thing you name, and a cited range must contain it on the first line. Quoted text is cited at the line the quoted characters are on, because a comment has its own line number and it is usually not the line of the code beside it. 3. "Never restate a count without the raw output in front of you" was ignored twice in that trial, so the rule flips from prohibition to requirement: any number stated must appear under Checks Run next to the command that produced it. Unwilling to show the command means describing the pattern rather than counting it. 4. Both Related Skills sections said the skill is one of seven and that the other five cover the remaining ground. Six, not five. Each section now names its sibling in this repository and links the remaining five out. Front matter is unchanged, so the generated README tables do not move.