Skip to main content

github-copilot-cli-expert

Provides expert guidance on installing and using GitHub Copilot CLI, including commands, configuration, and integration with workflows.

Install this skill

or
64/100

Security score

The github-copilot-cli-expert skill was audited on Feb 12, 2026 and we found 6 security issues across 4 threat categories, including 1 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

high line 56

Piping content to bash shell

SourceSKILL.md
56curl -fsSL https://gh.io/copilot-install | bash
medium line 56

Curl to non-GitHub URL

SourceSKILL.md
56curl -fsSL https://gh.io/copilot-install | bash
medium line 178

Access to hidden dotfiles in home directory

SourceSKILL.md
178- User-level: `~/.copilot/agents/`
medium line 191

Access to hidden dotfiles in home directory

SourceSKILL.md
191Config stored in: `~/.copilot/mcp-config.json`
medium line 269

Access to hidden dotfiles in home directory

SourceSKILL.md
269- Check trusted directories: `~/.copilot/config.json` → `trusted_folders`
low line 56

External URL reference

SourceSKILL.md
56curl -fsSL https://gh.io/copilot-install | bash
Scanned on Feb 12, 2026
View Security Dashboard
Installation guide →