skill-copilot-provider — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited skill-copilot-provider (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
GitHub Copilot CLI (GA since Feb 2026) serves as an optional provider in the Claude Octopus multi-LLM ecosystem. Integration uses the official copilot -p programmatic mode, not reverse-engineered API endpoints.
Core principle: Copilot supplements existing providers for research and exploration at zero additional cost (uses existing GitHub Copilot subscription). Each prompt counts as one premium request against your subscription quota.
Agent types: copilot (general), copilot-research (research-focused)
# Check copilot CLI is available
if ! command -v copilot &>/dev/null; then
# Copilot CLI not installed — silently skip
return 0
fiGraceful degradation: When Copilot CLI is unavailable or unauthenticated, silently skip. Other providers continue to operate normally.
Copilot CLI checks credentials in this precedence order:
COPILOT_GITHUB_TOKEN env var (highest priority — fine-grained PAT with "Copilot Requests" permission)GH_TOKEN env varGITHUB_TOKEN env varcopilot login)gh) authentication fallbackOption 1: Interactive login (recommended for local dev)
copilot loginOption 2: Fine-grained PAT (recommended for CI/automation)
export COPILOT_GITHUB_TOKEN="github_pat_..."Option 3: Reuse existing `gh` auth If gh auth login is already configured, Copilot CLI will use it automatically.
Note: Classic PATs (ghp_*) are NOT supported. Use fine-grained PATs (github_pat_*).
| Role | Agent Type | Use Case |
|---|---|---|
| General | copilot | Broad research, code explanation, exploration |
| Research | copilot-research | Research-focused exploration and analysis |
# Programmatic mode (non-interactive)
copilot -p "<prompt>" --no-ask-userWhen Copilot is active in a multi-provider workflow:
Providers:
🔴 Codex CLI - Implementation
🟡 Gemini CLI - Security review
🟢 Copilot CLI - Research perspective
🔵 Claude - SynthesisIndicator legend:
The /octo:doctor providers check reports Copilot availability and auth method:
Providers:
✓ Copilot CLI installed (auth: keychain)When unauthenticated: ⚠ Copilot CLI installed but not authenticated When missing: ℹ Copilot CLI not installed (optional)
copilot -p prompt = 1 premium request from your monthly allowance/model)🐙 **CLAUDE OCTOPUS ACTIVATED** - Multi-provider research mode
🔍 Discover Phase: Researching WebSocket authentication patterns
Providers:
🔴 Codex CLI - Technical implementation analysis
🟡 Gemini CLI - Ecosystem research
🟢 Copilot CLI - Research perspective
🔵 Claude - Strategic synthesis🐙 **CLAUDE OCTOPUS ACTIVATED** - Multi-provider research mode
🔍 Discover Phase: Researching WebSocket authentication patterns
Providers:
🔴 Codex CLI - Technical implementation analysis
🟡 Gemini CLI - Ecosystem research
🔵 Claude - Strategic synthesisWhen Copilot is not detected, it is silently omitted from the provider list.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.