# Copilot CLI

> This skill should be used when delegating GitHub-specific tasks — PRs, issues, repos, Actions, branches, code review — via `copilot -p`. Use it when Copilot CLI's GitHub-native tooling is an advantage over the host agent.

- Skill: `namos2502/copilot-cli` (Agent Skill)
- Install (CLI): `npx skillmds@latest add namos2502/copilot-cli`
- Raw SKILL.md: https://api.skillmd.com/api/skills/namos2502/copilot-cli/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: AI & ML
- Author: namos2502 (https://skillmd.com/u/namos2502)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/namos2502/copilot-cli

---


# Copilot CLI Agent

## When to Use

**Use Copilot CLI for:**
- GitHub-specific tasks — PRs, issues, repos, Actions, branches, code review
- Git workflow tasks where GitHub context helps
- Tasks where Copilot's GitHub-native tooling is an advantage

**Do NOT use Copilot CLI for:**
- General code explanations or refactors (handle natively or use Claude CLI)
- Tasks that need your current session context
- When Copilot is not installed or not authenticated

## Core Flags

| Flag | Purpose |
|------|---------|
| `-p "PROMPT"` | Prompt flag — executes prompt non-interactively and exits |
| `--no-ask-user` | Suppresses interactive permission prompts — required for non-interactive use |
| `--no-auto-update` | Prevents Copilot from updating itself mid-run |
| `--no-color` | Clean output, no ANSI escape codes |
| `-s` | ❌ Causes exit code 1 — do not use |

Always combine `--no-ask-user --no-auto-update --no-color` for clean programmatic output.

## Sandbox Limitation

Copilot CLI is sandboxed to its working directory. With `--no-ask-user`, any file access outside that directory silently fails — no error, no output. There is no `--cwd` flag; the only fix is to `cd` to the repo root before invoking.

⛔ **Always `cd` to the repo root before invoking.** Never call from a subdirectory.

```bash
# ❌ Sandboxed to client/ — reads outside it silently fail
copilot -p "..." --no-ask-user ...

# ✅ Correct — full repo accessible
cd $(git rev-parse --show-toplevel) && copilot -p "..." --no-ask-user ...
```

## Tool Permissions (`--allow-tool`)

Pre-approves tools so the agent doesn't pause to prompt.

| Use case | Flag |
|----------|------|
| Questions, analysis, review | `--allow-tool='read'` |
| Modify or create files | `--allow-tool='write,read'` |
| Modify files + run git commands | `--allow-tool='write,shell(git:*),read'` |

Shell access (`shell(...)`) is a separate, deliberate decision — not an automatic addition to write access. Only grant it when the task genuinely requires running commands.

Use `--deny-tool` to block specific commands within an allowed scope:
```bash
# Allow git reads but block pushes
--allow-tool='shell(git:*),read' --deny-tool='shell(git push)'
```
Deny rules always override allow rules.

## Model Selection

> Model IDs are versioned and change with releases. Run `copilot models` to get current names, then pick the fastest/cheapest for pings and a capable model for real tasks.

| Task | Flag |
|------|-------|
| Availability check / quick question | `--model=<fastest-available>` |
| Real tasks — analysis, fix, review | `--model=<capable-model>` |

## Invocation Patterns

**Read-only delegation (question, analysis):**
```bash
cd $(git rev-parse --show-toplevel) && \
copilot -p "[delegation prompt]" --no-ask-user --no-auto-update --no-color \
  --allow-tool='read' --model=claude-sonnet-4-5
```

**Write delegation (fix, implement):**
```bash
cd $(git rev-parse --show-toplevel) && \
copilot -p "[delegation prompt]" --no-ask-user --no-auto-update --no-color \
  --allow-tool='write,read' --model=claude-sonnet-4-5
```

**Write delegation + git (runs git commands):**
```bash
cd $(git rev-parse --show-toplevel) && \
copilot -p "[delegation prompt]" --no-ask-user --no-auto-update --no-color \
  --allow-tool='write,shell(git:*),read' --model=claude-sonnet-4-5
```

**Code review (built-in /review agent):**
```bash
cd $(git rev-parse --show-toplevel) && \
copilot -p "/review [scope]" --no-ask-user --no-auto-update --no-color \
  --allow-tool='shell(git:*),read' --model=claude-sonnet-4-5
```

Redirect stderr if needed: add `2>/dev/null`

## Delegation Prompt

Copilot CLI has no `--append-system-prompt` flag, so CortexLink agent context must be prepended to every delegation prompt. **Always open every delegation prompt with this block:**

```
You are operating as a CortexLink agent. Your output is consumed directly by a control center — not displayed to a user. Execute the task, verify your own work (Execute → Verify → fix if needed → Report), then return ONLY the structured report below. No reasoning steps, no "Let me..." output before the report.

---

[Task]: ...
```

The report format goes at the end (from the delegation template). The opening block teaches the agent the protocol — the closing block specifies this task's expected output.

⛔ **Critical:** Never omit the opening CortexLink agent context block. Without it, Copilot CLI has no way to learn the report format or self-verify protocol.

## Handling the Report

The agent's stdout is its report. Capture it directly:
```bash
REPORT=$(cd $(git rev-parse --show-toplevel) && \
  copilot -p "[prompt]" --no-ask-user --no-auto-update --no-color \
  --allow-tool='read' --model=claude-sonnet-4-5 2>/dev/null)
```

Read STATUS first. If ⚠️ or ❌, read ISSUES before deciding next action.

## Error Handling

| Failure | Action |
|---------|--------|
| Command not found | Tell user: `brew install copilot-cli` |
| Auth failure / no output | Tell user: `copilot login` then re-run `/cortexlink:setup` |
| Unexpected output format | Retry once. If still malformed, handle the task natively. |

## Chaining

Pass the SUMMARY + STEPS excerpt from this agent's report as [Context] in the next delegation prompt. Do not pass raw output.