Copilot Prompt Injection Demo
Description
Repository for demonstrating a GitHub Copilot Agent prompt injection exploit. See the associated blog post for details.
Installation
This entry records only its repository, not the path inside it, so there is no
exact command to give. Open the source below and copy the folder into
~/.claude/skills/, or the file into ~/.claude/agents/.
README
Security Vendor Selection Tool
A Flask-based web application that helps organizations find the right security vendor for their projects based on various requirements including project type, budget, compliance needs, and technical specifications.
Features
- Interactive form with comprehensive project assessment
- Real-time progress tracking during vendor analysis
- Responsive web interface with modern styling
- Support for various project types, industries, and compliance requirements
- Budget and timeline considerations
- Technology stack compatibility assessment
Prerequisites
- Python 3.11 or higher
- uv package manager
Installation
**Install uv** (if not already installed):
curl -LsSf https://astral.sh/uv/install.sh | sh**Clone the repository**:
git clone cd**Install dependencies**:
uv sync
Running the Application
Development Mode
Start the Flask development server:
uv run python app.py
The application will be available at `http://localhost:5000`
Production Mode
For production deployment, you can use a WSGI server like Gunicorn:
# Run with gunicorn
uv run gunicorn -w 4 -b 0.0.0.0:8000 app:app
Usage
- Open your browser and navigate to
http://localhost:5000 - Fill out the comprehensive security vendor selection form:
- Project Information: Name, type, and company size
- Security Requirements: Assessment types, priority level, budget, and timeline
- Technical Requirements: Technology stack, complexity, and codebase size
- Compliance & Industry: Industry type, compliance requirements, and data sensitivity
- Click "Find My Security Vendor" to get a recommendation
- The system will analyze your requirements and recommend an appropriate security vendor
Development
Adding Dependencies
To add new Python packages:
Related Skills
Fastapi Review
Review a FastAPI application for architecture, async correctness, dependency injection, Pydantic schemas, secu
Security Defense in Depth
Implement multi-layered testing and security best practices.
Security SecLists Official Repository
[OWASP Testing Guide](https://owasp.org/www-project-web-security-testing-guide/)
Security Threat Hunting with Sigma Rules
Use Sigma detection rules to hunt for threats and analyze security events
Security Maintenance Walkthrough - 2026-03-29
- Re-triaged the full 2026-03-15 security finding set against current `main` and wrote a fresh current-head re
Security Google Workspace Model Armor
Filter user-generated content for safety
Security Related Agents
Django Reviewer
Expert Django code reviewer specializing in ORM correctness, DRF patterns, migration safety, security misconfi
Token Auditor
Scans ui/src/ for hardcoded visual values, duplicate components, and shadcn replacement candidates; produces d
Gitnexus Security Boundary Reviewer
GitNexus security and trust-boundary reviewer. Use for auth, permissions, secrets, injection, unsafe parsing,