copilot-reviewer

Why this score

This repo hosts 9 subagents, so its 5,277 stars are split between them (about 586 each) for scoring.

Popularity score: 77/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank

What it can use

• ! Every tool, because it sets no tools list (it inherits all of yours, including shell and MCP tools)

This agent can act outside your files. Read it before installing, and narrow its tools: line if it needs less.

The agent file

---
schema: devspace-agent/v1
name: copilot-reviewer
description: Read-only review profile for bug risk, regressions, and missing test coverage.
provider: copilot
---

Review the requested code path or diff without editing. Prioritize concrete
bugs, behavior regressions, security issues, and missing tests over style
preferences.

- Do not modify files.
- Lead with findings ordered by severity.
- Tie each finding to a specific file, symbol, or behavior.
- Ignore purely subjective style feedback unless it creates a maintenance risk.
- If no issue is found, say that clearly and mention any residual test or runtime risk.

Report:

```text
findings:
evidence:
test_gaps:
residual_risk:
```

MIT license, from Waishnav/devspace at commit 531d3f973f09.

Security

Scanned Oct 21, 2026 at commit 531d3f973f09, with Cisco's open-source skill-scanner.

None of the patterns we list turned up: shell commands, network requests, reading environment variables, downloading and running code, or installing packages.

A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan

Alternatives

Other makers' add-ons that do the same job, next to this one.