Microsoft

OWASP Agentic Security Top 10 knowledge base for identifying, assessing, and remediating AI agent system security risks.

中文简介正在准备中。当前显示原文说明。

Research-only RPI playbook that gathers task evidence, writes dated research artifacts under .copilot-tracking/research/ or a caller's trusted evidence root, and hands off planning-ready findings. Use when the user needs evidence, alternatives, or task framing first.

中文简介正在准备中。当前显示原文说明。

OWASP Docker Top 6 knowledge base for identifying, assessing, and remediating Docker container security risks.

中文简介正在准备中。当前显示原文说明。

Secure by Design principles knowledge base for assessing security-first design, development, and deployment across the software lifecycle.

中文简介正在准备中。当前显示原文说明。

Format specifications and data contracts for the security reviewer orchestrator and its subagents.

中文简介正在准备中。当前显示原文说明。

Software supply chain security reference for OpenSSF Scorecard, SLSA, Sigstore, SBOM, and posture/backlog taxonomies.

中文简介正在准备中。当前显示原文说明。

Requirements authoring guide for BRD and PRD across Discover, Define, and Govern with canonical templates and handoff contracts

中文简介正在准备中。当前显示原文说明。

Create or resume an evidence-based RPI implementation plan with an optional independent critique. Use when a task needs an implementation plan or an existing plan needs revision.

中文简介正在准备中。当前显示原文说明。

OWASP Top 10 for LLM Applications (2025) knowledge base for identifying, assessing, and remediating large language model security risks.

中文简介正在准备中。当前显示原文说明。

Shared work-item templates and conventions for ADO and GitHub backlog handoff across the RAI, Security, SSSC, Accessibility, and Privacy planners

中文简介正在准备中。当前显示原文说明。

Guided, conversational walkthrough that explains code, UI, UX, features, or .copilot-tracking artifacts with navigable evidence links, a deep review before explaining, and a reconciled decisions-and-changes ledger. Use when the user wants to understand how something works or why it was changed.

中文简介正在准备中。当前显示原文说明。

Declarative OpenTelemetry-aligned telemetry vocabulary and instrumentation conventions for traces, metrics, logs, and PII handling

中文简介正在准备中。当前显示原文说明。

Consolidated Responsible AI standards reference: NIST AI RMF 1.0, AI STRIDE threat-modeling overlay, EU AI Act risk tiers, and an open-standards catalog with phase mapping

中文简介正在准备中。当前显示原文说明。

Independently assess an RPI plan without editing it. Use when an implementation-ready plan needs a credibility check or a revised plan needs its earlier findings reconciled.

中文简介正在准备中。当前显示原文说明。

Challenge a confirmed task, decision, plan, or artifact through adaptive skeptical questions. Use when you need to expose assumptions before acting.

中文简介正在准备中。当前显示原文说明。

Follow an approved RPI plan, keep it current as new information comes to light, check off completed work, and keep a condensed changes log. Use when implementation is ready to begin or resume.

中文简介正在准备中。当前显示原文说明。

OWASP Top 10 for Web Applications (2025) knowledge base for identifying, assessing, and remediating web application security risks.

中文简介正在准备中。当前显示原文说明。

Generates PR reference XML with commit history and unified diffs between branches, with extension and path filtering. Use when creating pull request descriptions, preparing code reviews, analyzing branch changes, discovering work items from diffs, or generating structured diff summaries.

中文简介正在准备中。当前显示原文说明。

Retrieves and groups GitHub code scanning alerts by rule and severity using the gh CLI

中文简介正在准备中。当前显示原文说明。

Microsoft Cloud Security Benchmark (MCSB v2) control-domain taxonomy and NIST 800-53 / CIS Controls crosswalk for planning and reviewing Azure cloud resources.

中文简介正在准备中。当前显示原文说明。

OWASP Infrastructure Top 10 knowledge base for identifying, assessing, and remediating internal IT infrastructure security risks.

中文简介正在准备中。当前显示原文说明。

OWASP CI/CD Top 10 knowledge base for identifying, assessing, and remediating CI/CD pipeline security risks.

中文简介正在准备中。当前显示原文说明。

On-demand RAI planner reference pack covering Phase 1 capture, Phase 2 risk classification and the optional Mural board bootstrap, Phase 5 impact assessment, and Phase 6 review and backlog handoff.

中文简介正在准备中。当前显示原文说明。

Compare RPI planning and implementation evidence, record review findings, and route follow-up work. Use when an implementation needs acceptance review.

中文简介正在准备中。当前显示原文说明。