Install
$ agentstack add skill-layer1labs-specsmith-copilot-integration ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
GitHub Copilot — specsmith Governance Integration
One-time setup
specsmith integrate copilot # generates .github/copilot-instructions.md
Copilot reads .github/copilot-instructions.md automatically for all workspace interactions. The generated file embeds the preflight gate, session protocol, and hard rules.
Every Copilot session — mandatory protocol
- Run at session start:
specsmith kill-session 2>/dev/null || true
specsmith audit --project-dir .
specsmith sync --project-dir .
specsmith checkpoint --project-dir .
- Output checkpoint block verbatim.
- Before every code change:
specsmith preflight "" --json
- Only proceed if
decision == "accepted"
- Every 8–10 turns:
specsmith checkpoint(output verbatim) - Session end:
specsmith save && specsmith kill-session
Key files
.github/copilot-instructions.md— Copilot workspace instructionsAGENTS.md— universal governance hub.agents/skills/specsmith/SKILL.md— master CLI reference
Note
Copilot does not natively support MCP as of 2026. Governance is enforced through .github/copilot-instructions.md and AGENTS.md.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: layer1labs
- Source: layer1labs/specsmith
- License: MIT
- Homepage: https://specsmith.readthedocs.io
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.