任务识别 → Agent 边界设计 → 工具清单 → Agent Profile 编写 → 本地结构校验 → CLI 调用 → 团队评审 → 持续迭代

your-repo/
├── .github/
│   └── agents/
│       ├── security-audit.agent.md
│       └── release-docs.agent.md
├── scripts/
│   └── validate_agent_profiles.py
├── .semgrep.yml              # 可选：安全扫描配置
├── .trivyignore              # 可选：Trivy 忽略规则
├── .gitleaks.toml            # 可选：Gitleaks 配置
└── CHANGELOG.md              # 可选：发布说明输入/输出

---
name: Security audit
description: Run standard security checks and produce a PR-ready checklist grouped by severity.
model: GPT-4.1
tools:
  - gh
  - git
  - semgrep
  - trivy
  - gitleaks
  - jq
---

# Security audit

## Goal
For the repository provided by the user, run standard security checks, summarize findings by severity, and output a PR-ready checklist with owners and next steps.

## Operating rules
- Prefer existing repository configuration files: `.semgrep.yml`, `.trivyignore`, `.gitleaks.toml`.
- If a tool is missing, record it as a **High** severity coverage gap instead of inventing results.
- Do not paste secrets or full vulnerable payloads. Redact tokens and credentials.
- Output must include severity, owner, evidence, recommended fix, and verification command.

## Standard checks
1. Secret scanning: `gitleaks detect --redact --no-git --source .`
2. Container/filesystem scan: `trivy fs .`
3. SAST scan: `semgrep scan --config .semgrep.yml`

## Ownership mapping
- `backend/**`: @api-team
- `frontend/**`: @web-platform
- `.github/workflows/**`: @platform-eng
- `terraform/**`: @infra-oncall
- everything else: @security-champions

## Output format

---
name: Release docs
description: Generate release notes from git tags, merged PRs, and CHANGELOG.md.
model: GPT-4.1
tools:
  - git
  - gh
  - jq
---

# Release docs

## Goal
Create a release note draft for the requested version range.

## Inputs
- Current release version
- Previous release tag, or fallback to the latest Git tag

## Workflow
1. Identify the version range with `git tag --sort=-creatordate`.
2. Collect merged pull requests with `gh pr list --state merged`.
3. Read existing `CHANGELOG.md` if available.
4. Group changes into Added, Changed, Fixed, Security, Performance, and Maintenance.
5. Produce a Markdown release note draft.

## Rules
- Do not invent PRs or contributors.
- If GitHub CLI is unavailable, report the missing tool and continue with git log only.
- Keep breaking changes and migration notes near the top.
- Include verification notes when available.

## Output format

from __future__ import annotations

import sys
from pathlib import Path

REQUIRED_FIELDS = ("name:", "description:", "tools:")


def validate_agent(path: Path) -> list[str]:
    text = path.read_text(encoding="utf-8")
    errors: list[str] = []

    if not path.name.endswith(".agent.md"):
        errors.append("file name must end with .agent.md")

    if not text.startswith("---\n") or "\n---\n" not in text[4:]:
        errors.append("missing YAML frontmatter")

    frontmatter = text.split("---", 2)[1]
    for field in REQUIRED_FIELDS:
        if field not in frontmatter:
            errors.append(f"missing frontmatter field: {field}")

    if "Do not" not in text and "不要" not in text:
        errors.append("missing explicit safety boundary")

    return errors


def main() -> int:
    root = Path(sys.argv[1]) if len(sys.argv) > 1 else Path(".")
    files = sorted((root / ".github" / "agents").glob("*.agent.md"))

    if not files:
        print("FAIL: no .agent.md files found")
        return 1

    failed = False
    for path in files:
        errors = validate_agent(path)
        if errors:
            failed = True
            print(f"FAIL: {path}")
            for error in errors:
                print(f"  - {error}")
            continue
        print(f"PASS: {path}")

    return 1 if failed else 0


if __name__ == "__main__":
    raise SystemExit(main())

python3 scripts/validate_agent_profiles.py .

PASS: .github/agents/release-docs.agent.md
PASS: .github/agents/security-audit.agent.md

/agent

Run security audit for this repository. Use existing config files when available. Do not expose secrets. Produce a PR-ready checklist.

Generate release notes for v1.8.0. Compare against the previous git tag. Do not invent PRs. Put breaking changes first.

Repository: 当前仓库或指定仓库
Scope: full / changed-files-only
Output target: PR comment / Markdown file / terminal only
Risk mode: read-only

Version: v1.8.0
Previous tag: v1.7.3 或 auto
Audience: internal / customer-facing
Output target: CHANGELOG draft / GitHub release draft

Service: payments-api
Environment: production / staging
Start time: March 23, 2026 10:00 am PT
End time: March 23, 2026 11:30 am PT
Incident commander: @name
Output target: incident timeline / postmortem draft

专业工具负责事实 → Agent 负责调度与整理 → 人负责确认和批准

If a required tool is missing, do not invent results. Record it as a High severity coverage gap and include the install or remediation hint.

If `.semgrep.yml` is missing, do not run a generic broad scan silently. Report the missing config and explain what was skipped.

Never print secrets, tokens, private keys, or full vulnerable payloads. Redact them before including evidence.

Default to read-only mode. Do not push commits, publish releases, create tickets, change infrastructure, or delete resources unless the user explicitly confirms that step.

## Agent profile review checklist

- [ ] 文件位于 `.github/agents/`
- [ ] 文件名以 `.agent.md` 结尾
- [ ] frontmatter 包含 `name`、`description`、`tools`
- [ ] 工具列表只包含团队实际支持的工具
- [ ] 写明工具缺失时的行为
- [ ] 写明敏感信息脱敏规则
- [ ] 写明默认只读边界
- [ ] 写明输出格式
- [ ] 示例命令可以在本地或 CI 中验证
- [ ] 不包含 token、密码、私有 IP 或内部密钥

- [ ] 所有写操作都需要人工确认
- [ ] 默认 dry-run
- [ ] 有回滚说明
- [ ] 输出中明确标记未执行的建议动作

name: Agent profile checks

on:
  pull_request:
    paths:
      - ".github/agents/**"
      - "scripts/validate_agent_profiles.py"

jobs:
  validate-agents:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-python@v5
        with:
          python-version: "3.12"
      - run: python3 scripts/validate_agent_profiles.py .

目标：扫描并生成安全 checklist
工具：gitleaks / trivy / semgrep
边界：只读、脱敏、不编造结果
输出：按严重性分组的 Markdown
验收：每条发现有 owner、evidence、fix、verify command

目标：根据 git tag 和 merged PR 生成 release notes
工具：git / gh / jq
边界：不发布、不 push、不编造 PR
输出：Highlights + 分类变更 + Upgrade notes + Verification
验收：所有条目能追溯到 commit、PR 或 CHANGELOG

目标：收集部署、错误率、延迟、日志摘要并生成事故快照
工具：日志平台 CLI / metrics API / git / deploy history
边界：脱敏、只读、不自动回滚、不自动扩容
输出：timeline + impact + suspected causes + next actions
验收：每条结论都标注来源或不确定性

你是一个资深安全专家，请帮我检查项目安全问题。

Run gitleaks, trivy, and semgrep using repository configs. If a tool is missing, report a High severity coverage gap. Redact secrets. Output a PR-ready checklist grouped by severity.

/tmp/copilot-agent-workflow-demo/
├── .github/agents/release-docs.agent.md
├── .github/agents/security-audit.agent.md
└── scripts/validate_agent_profiles.py

python3 /tmp/copilot-agent-workflow-demo/scripts/validate_agent_profiles.py /tmp/copilot-agent-workflow-demo

PASS: /tmp/copilot-agent-workflow-demo/.github/agents/release-docs.agent.md
PASS: /tmp/copilot-agent-workflow-demo/.github/agents/security-audit.agent.md

# Custom Agent 落地清单

## 任务边界
- [ ] 这个任务是否重复发生？
- [ ] 是否有固定输入？
- [ ] 是否有固定工具？
- [ ] 是否有固定输出格式？
- [ ] 是否默认只读或 dry-run？

## Agent Profile
- [ ] 文件在 `.github/agents/`
- [ ] 文件名以 `.agent.md` 结尾
- [ ] 有 YAML frontmatter
- [ ] 包含 `name`、`description`、`tools`
- [ ] 工具列表真实可用
- [ ] 写明工具缺失处理
- [ ] 写明敏感信息脱敏规则
- [ ] 写明输出模板

## 验证
- [ ] 本地结构校验通过
- [ ] 至少一次人工 dry-run
- [ ] 输出能被 PR / Issue / Release / Incident 文档直接使用
- [ ] 团队 review 通过

## 上线边界
- [ ] 不自动执行生产写操作
- [ ] 不自动发布 release
- [ ] 不自动修改基础设施
- [ ] 高风险动作需要人工确认