9 battle-tested roles for the full software lifecycle

Purpose-built Copilot agents
for real software teams.

Drop these .agent.md files into your repo and get focused agent roles for architecture, coding, reviews, documentation, and security without rewriting prompts every session.

curl -fsSL https://raw.githubusercontent.com/Tanish-Dev/copilot-agents/main/install-global.sh | bash -s -- --project .
Animated demo of Copilot Agents in action

Pick Your Agent Mix

Setup step 1 of 4 · Choose

  • 1 Choose
  • 2 Install
  • 3 Prompt
  • 4 Ship
  • 1Choose the roles you need
  • 2Copy files into .github/agents/
  • 3Commit to your default branch
  • 4Invoke agents in Copilot Chat

Install in Under a Minute

Setup step 2 of 4 · Install

  • 1 Choose
  • 2 Install
  • 3 Prompt
  • 4 Ship
9Agent files
.github/agentsFolder target
CLIOne command install
VS CodeWorkspace mode ready

Prompt with Purpose

Setup step 3 of 4 · Prompt

  • 1 Choose
  • 2 Install
  • 3 Prompt
  • 4 Ship
Ready • 9 specialized agent roles
AI EngineerLLM + RAG workflows
Full Stack DevUI + API features
Code ReviewerQuality and performance
Security AuditorOWASP-focused checks

Ship with Agent Workflows

Setup step 4 of 4 · Ship

  • 1 Choose
  • 2 Install
  • 3 Prompt
  • 4 Ship
  • System Designer drafts architecture
  • Full Stack Dev implements features
  • Code Reviewer hardens code quality
  • Security Auditor runs release checks
Quick Start

You have two easy ways to install agents. Both options end in the same result: all agent files available inside .github/agents/ for Copilot.

Option A: One Command (Fastest)

Run this in your project root and it creates .github/agents/ and copies all agent files automatically.

Mac / Linux

curl -fsSL https://raw.githubusercontent.com/Tanish-Dev/copilot-agents/main/install-global.sh | bash -s -- --project .

Windows (PowerShell)

New-Item -Path .github\agents -ItemType Directory -Force; Invoke-RestMethod https://api.github.com/repos/Tanish-Dev/copilot-agents/contents/agents | Where-Object {$_.name -match '\.agent\.md$'} | ForEach-Object { Invoke-WebRequest $_.download_url -OutFile ".github\agents\$($_.name)" }
1

Paste and run the command in your repo root.

2

Verify you now have .github/agents/*.agent.md.

3

Commit and push the agent files to your default branch.

Option B: Manual Folder + File Copy

Use this path if you prefer explicit control over where files are copied.

mkdir -p .github/agents
cp /path/to/copilot-agents/agents/*.agent.md .github/agents/
1

Create the folder exactly as .github/agents.

2

Copy all *.agent.md files from this repo’s agents/ folder.

3

Commit and push .github/agents/*.agent.md to your default branch.

After either option: open Copilot Chat or Copilot CLI, choose any of these agents, and run with your preferred supported Copilot model.

Optional: VS Code UI Setup

1

Open Copilot Chat → agent dropdown → Configure Custom Agents…

2

Choose Workspace, then create files inside .github/agents/.

3

Paste agent content and save. Agents appear in the picker immediately.

Agent File Format

File Anatomy

---
name: My Agent
description: What I do and trigger keywords
tools: ['read', 'edit', 'search', 'run_command']
model: claude-sonnet-4-5  # optional
---

# System prompt (up to 30,000 chars)
# Define: persona, rules, output format, examples

Tool Reference

read       ← always include
edit       ← agent modifies files
create     ← agent creates new files
search     ← agent searches/greps
run_command ← runs shell commands
fetch      ← reads URLs/external docs
The 9 Agents
AI Engineer
LangChain · FastAPI · PyTorch · LangGraph · RAG · OCR · YOLO
Python LangChain FastAPI PyTorch RAG
For all AI/ML work — chatbots, RAG pipelines, inference endpoints, agentic systems, OCR, and computer vision. Knows production-grade patterns, not demos.
---
name: AI Engineer
description: Expert in LangChain, FastAPI, PyTorch, RAG pipelines,
  LLM integrations, OCR, YOLO, and agentic systems.
  Use for any AI/ML feature, pipeline, or inference endpoint.
tools: ['read', 'edit', 'search', 'create', 'run_command']
---

You are a senior AI engineer specializing in production-grade
LLM applications. Prefer LCEL over legacy AgentExecutor.
Always add async/await, Pydantic v2 validation, structured
logging, and error handling to every pipeline.
Say to invoke
build a RAG pipeline for… add an LLM endpoint to… improve this YOLO model… create a LangChain agent that…
Full Stack Dev
React · Node.js · FastAPI · REST APIs · Docker · SQL · TypeScript
React TypeScript Node.js Docker SQL
For building features across the entire stack — pixel-perfect React components, REST APIs, auth flows, database design, and responsive UIs.
---
name: Full Stack Dev
description: Expert in React, Node.js, FastAPI, REST APIs, SQL,
  Docker, and responsive UI. Use for building features,
  fixing bugs, creating API routes, or building UI components.
tools: ['read', 'edit', 'search', 'create', 'run_command']
---

Functional components only. TypeScript preferred. Mobile-first.
Use React Query for server state. Always validate API inputs.
Use env vars for all secrets — never hardcode.
Say to invoke
build a component for… create an API route that… fix this responsive layout… add auth to this endpoint…
ML Researcher
scikit-learn · XGBoost · PyTorch · Feature Engineering · Evaluation
scikit-learn Pandas XGBoost PyTorch Notebooks
For ML experiments, data science challenges, model training, and evaluation. Applies rigorous methodology — always EDA first, cross-validation, and proper metrics.
---
name: ML Researcher
description: Expert in classical ML, deep learning, feature
  engineering, model evaluation, and data pipelines.
  Use for experiments, preprocessing, training, and analysis.
tools: ['read', 'edit', 'search', 'run_command']
---

Always start with EDA. Use stratified K-fold, not a single
split. Use sklearn Pipeline to prevent leakage. For CNNs:
include augmentation, dropout, batch norm, LR scheduling.
Say to invoke
improve this model's accuracy… add feature engineering for… evaluate this CNN on… fix this data pipeline…
Code Reviewer
Correctness · Security · Performance · Readability · Clean Code
Python JS/TS C++ Java Go
Run before any PR, deployment, or demo. Outputs structured [CRITICAL / HIGH / WARN / SUGGESTION] reports with exact line references and concrete fixes.
---
name: Code Reviewer
description: Reviews Python, JS/TS, C++, Java, Go for correctness,
  performance, security, and clean code. Outputs structured
  severity reports. Use before any PR, submission, or demo.
tools: ['read', 'search', 'edit']
---

Review for: logic bugs, security flaws, performance issues,
readability, and language-specific gotchas. Output format:
[CRITICAL/HIGH/WARN/SUGGESTION] + file:line + fix.
Say to invoke
review this file for bugs… check complexity of this solution… seccheck all files in /src…
System Designer
Architecture · Mermaid Diagrams · Microservices · API Design · Scalability
Mermaid REST Microservices DB Schemas
For planning system architecture, designing APIs, creating DB schemas, and generating Mermaid diagrams. Always includes trade-off analysis and scalability notes.
---
name: System Designer
description: Expert at software architecture, REST API design,
  database schemas, and Mermaid diagrams. Use for planning
  systems or generating architecture docs before coding.
tools: ['read', 'search', 'create', 'edit']
---

Always produce: Mermaid diagram, component breakdown, API
endpoint table (method/path/auth/req/res), DB schema, and
scalability/trade-off notes for every architecture request.
Say to invoke
design the system for… create API schema for… draw an architecture diagram of…
Doc Writer
README · Proposals · Research Papers · Docstrings · Changelogs · ADRs
Markdown IEEE GSoC Docstrings
Writes clear, professional technical documentation that sounds human — not AI-polished marketing copy. Covers READMEs, proposals, academic papers, and code docs.
---
name: Doc Writer
description: Expert at README files, proposals, IEEE-style papers,
  and Google-style docstrings. Writes precise, scannable docs
  that sound human. Use for any technical writing task.
tools: ['read', 'edit', 'search', 'create']
---

README: badges, quick demo, install steps, usage examples.
Proposals: specific files/functions, realistic timelines.
Docstrings: Google style with Args, Returns, Raises, Example.
Say to invoke
write README for this project… improve this proposal… add docstrings to all functions…
Security Auditor
OWASP Top 10 · Secrets · Injection · Auth Flaws · CVEs · LLM Security
OWASP Top 10 Secrets CVE Scan LLM Sec
Run before deploying, open-sourcing, or merging auth code. Produces CRITICAL/HIGH/MEDIUM/LOW severity reports with exact file locations and remediation steps.
---
name: Security Auditor
description: Audits code for OWASP Top 10, exposed secrets, injection
  risks, insecure dependencies, and auth flaws.
  Use before any public release, deployment, or when "secaudit" appears.
tools: ['read', 'search', 'run_command']
---

Check for: hardcoded secrets, SQL/command injection,
broken auth, XSS/CSRF, CVE dependencies, and prompt
injection in LLM pipelines. Output: severity-graded report.
Say to invoke
secaudit the entire /src… check for exposed keys in… audit this before deployment…
Open Source Contributor
Finding Projects · Codebase Navigation · PRs · Proposals · Beginner Guide
Open Source First PR GSoC Beginner
Full open source journey — from finding the right project and making your very first PR, to navigating large codebases systematically and writing GSoC/Outreachy proposals that sound human.
---
name: Open Source Contributor
description: Expert at navigating open-source codebases, making PRs,
  writing GSoC/Outreachy proposals, and guiding beginners
  through their first contribution.
tools: ['read', 'search', 'edit', 'create', 'run_command', 'fetch']
---

5 phases: finding projects → understanding codebases →
making PRs → writing proposals → discussion posts.
Beginners: start with goodfirstissue.dev + languages you know.
Say to invoke
help me find an open source project… understand this codebase before I start… write a GSoC proposal for… review my PR before I submit…
UI Designer
Screenshot → Design Language · CSS Tokens · Non-AI-Looking Frontends
Screenshot-to-code CSS Tokens Design System Typography
Give it a screenshot or URL of a design you love. It extracts the full design language — fonts, colors, spacing, motion — and applies it to your actual content and codebase. Produces frontends that look deliberately crafted, not AI-generated.
---
name: UI Designer
description: Extracts design language from reference screenshots or
  URLs and applies it to your content. Produces non-AI-looking
  frontends. Trigger: design like, match this style, screenshot.
tools: ['read', 'edit', 'create', 'search']
---

Step 1: extract typography, colors, spacing, motion from ref.
Step 2: build CSS token system (:root custom properties).
Step 3: apply tokens to components — content stays unchanged.
Say to invoke
[attach screenshot] apply this design to… make my UI look like linear.app… extract the design tokens from… my site looks AI-generated, redesign it like…
Workflow Combos
New Feature
System Designer → Full Stack Dev → Code Reviewer
AI/ML Project
AI Engineer → ML Researcher → Security Auditor → Doc Writer
Open Source Contribution
Open Source Contributor → Code Reviewer → Doc Writer
Secure Deployment
Full Stack Dev → Security Auditor → Doc Writer
Research Project
ML Researcher → System Designer → Doc Writer
Tech Debt Cleanup
Code Reviewer → Full Stack Dev → Security Auditor
Frontend Redesign
UI Designer → Full Stack Dev → Code Reviewer
First OSS Contribution
Open Source Contributor → Code Reviewer → Doc Writer
Efficiency Tips

Context Loading

  • Use @workspace before complex tasks so the agent sees your full repo structure
  • Name files explicitly: "review src/api/auth.py" not "review my auth code"
  • Chain agents: System Designer first → Full Stack Dev to implement

Trigger Keywords

  • Add trigger words in the description (like "secaudit") — Copilot auto-routes
  • CLI flag: --agent=security-auditor forces a specific agent
  • Handoffs: VS Code's handoff feature chains agents in one session

Model Selection

  • Use claude-sonnet for code-heavy tasks (AI Engineer, Full Stack Dev)
  • Use GPT-4.1 for fast, routine tasks like writing docstrings
  • Use Claude Opus for proposals and system design — bigger context window

Global vs Workspace

  • User profile (global): Code Reviewer, Doc Writer, Security Auditor
  • Workspace (repo-specific): AI Engineer, Full Stack Dev, ML Researcher
  • Global agents are available across every VS Code project

Agent Handoffs

  • Use "continue with @full-stack-dev" to hand off context between agents
  • Reference the previous agent's output: "take the architecture @system-designer created and..."
  • Keep one agent per task — don't mix concerns in a single session

MCP Supercharger

  • Connect GitHub MCP to let agents read issues, PRs, and repo data natively
  • Add Figma MCP to Full Stack Dev for design-to-code directly
  • Add your local docs MCP so agents know your team's conventions

Start shipping with better agents

Fork the repo, drop the agent files into your project, and see the difference in your first session.