·
Last changedVersion:
No hardening report available.
Use this skill whenever the user wants to create, regenerate, or refresh their custom instructions for AI coding agents (Copilot, Claude, etc.). This is the Generate step in AgentRC's Measure → Generate → Maintain loop and the single highest-leverage action for the AI Tooling pillar.
This skill executes AgentRC from GitHub. To prevent supply-chain substitution,
always use the exact commit SHA pinned in allowed-tools above. Before running,
verify the SHA against the agentrc releases page.
The pinned SHA is: a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6a1b2
When updating this skill, the SHA must be updated both here and in the allowed-tools
frontmatter simultaneously.
VS Code recognises several instruction file types — AgentRC generates the most common ones:
| File | Scope | When to use |
|---|---|---|
| Always-on, whole workspace | Default — VS Code Copilot's native instruction file |
| Always-on, whole workspace | Multi-agent repos (Copilot + Claude + others) |
| Scoped by | Per-area / per-language rules in monorepos |
| Claude-specific | Add via |
flat (default) — single .github/copilot-instructions.md at the chosen path. Simple, easy to review.nested — hub at .github/copilot-instructions.md + per-topic detail files at .github/instructions/<topic>.instructions.md, each with an applyTo glob so VS Code only loads the topic when it's relevant. Better for large or multi-stack repos.For monorepos, generate area-scoped instructions with --areas, --area <name>, or --areas-only. Areas are defined in agentrc.config.json. Per-area output is written as VS Code .instructions.md files with an applyTo glob (see below).
.instructions.md filesBoth end up in .github/instructions/ but they answer different questions:
| Kind | Filename example | applyTo example | Where it comes from |
|---|---|---|---|
Topic (nested) |
|
| AgentRC |
Area (monorepo) |
|
|
|
You can have both at once: a nested set of topic files plus per-area files for a monorepo.
applyToWhen the user opts into areas, emit one VS Code-native .instructions.md file per area at .github/instructions/<area>.instructions.md. Each file MUST start with frontmatter declaring the glob the rules apply to:
Workflow:
agentrc.config.json to discover declared areas and their paths / globs. If paths is missing, ask the user for the glob (e.g. src/api/**).
Path validation for area globs: Before using any paths value from agentrc.config.json as an applyTo glob or a write target, verify it does not begin with /, ~, or ../. If it does, surface the offending value to the user and halt rather than proceeding.agentrc instructions --areas (or --area <name>) to produce the per-area body content..github/instructions/<area>.instructions.md with the applyTo frontmatter taken from the area's paths. If the user passed --apply-to <glob> on a single-area call, use that glob verbatim..github/copilot-instructions.md stays as the always-on instructions; .instructions.md files only kick in for matching paths.Naming: lowercase, kebab-case area name. Examples: .github/instructions/frontend.instructions.md, .github/instructions/api.instructions.md, .github/instructions/infra.instructions.md.
.github/copilot-instructions.md. Switch to AGENTS.md only if the user mentions multi-agent / Claude / Cursor support.
Output path validation: The --output value MUST be one of: .github/copilot-instructions.md, AGENTS.md, or CLAUDE.md. Reject any other path without executing the command. Do not accept relative traversals (../), absolute paths, or home-directory expansions (~/).flat or nested — unless the user already specified one in their message or via --strategy. Present the trade-off briefly:
.github/copilot-instructions.md. Simple, easy to review in a single PR. Best for small/medium repos with one stack..github/copilot-instructions.md + per-topic .github/instructions/<topic>.instructions.md files (each with an applyTo glob so VS Code only loads them when relevant). Best for large or multi-stack repos. Add --claude-md to also emit CLAUDE.md.
Recommend nested proactively when the repo has > 5 top-level directories, multiple stacks, or already uses a monorepo tool (turbo/nx/pnpm workspaces).agentrc.config.json. If areas exist, ask the user whether they want per-area .instructions.md files with applyTo in addition to the root file. Default to "yes" when agentrc.config.json declares areas.applyTo globs, model used (default claude-sonnet-4.6). Display the resolved package identity (pinned SHA: a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6a1b2) and ask the user to confirm it matches the SHA documented in the "Dependency pin" section before proceeding.--dry-run (and optionally --force if files already exist):
--output ends in copilot-instructions.md and strategy is nested: move/rewrite AgentRC's .agents/<topic>.md files to .github/instructions/<topic>.instructions.md. Add frontmatter to each file with an appropriate applyTo glob (see "Topic applyTo defaults" below). Delete the now-empty .agents/ directory.--areas was used: also write .github/instructions/<area>.instructions.md for every area, using each area's paths from agentrc.config.json as the applyTo glob (override with --apply-to for single-area calls).--output AGENTS.md was chosen: keep AgentRC's native .agents/ layout for nested — agent-agnostic readers expect it there.
Create the .github/instructions/ directory if missing.applyTo defaultsWhen promoting AgentRC's nested topic files to .instructions.md, use these defaults unless the user specifies otherwise:
| Topic | Default applyTo |
|---|---|
|
|
|
|
|
|
|
|
|
|
anything else / hub-level |
|
.instructions.md files with their globs.assess skill to confirm the AI Tooling pillar score improved.copilot-instructions.md and AGENTS.md, recommend consolidating to a single source of truth (AgentRC flags this at maturity Level 2+).--claude-md (nested strategy only) also emits CLAUDE.md..instructions.md files automatically when the active file matches applyTo. The root .github/copilot-instructions.md always loads.a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6a1b2) must be verified against the agentrc releases page and updated in both the allowed-tools frontmatter and the "Dependency pin" section whenever the catalog entry is refreshed.Need this version hardened?
Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.
—
—
MIT
HARDENING.md
LICENSE
SKILL.md