·
Last changedVersion:
This version passed the hardening gate. Hardening applied 10 targeted changes and preserved all other text. Classified findings before hardening: 0. Classified findings closed: 0. Classified findings remaining: 0. Unclassified scanner findings remaining: 0. Review findings closed: 6. Review findings remaining: 8.
None
None
Expand | File | Group | Subtype | Severity | Status |
|---|
No findings available
0 findings
Use Copilot Spaces to bring curated, project-specific context into conversations. A Space is a shared collection of repositories, files, documentation, and instructions that grounds Copilot responses in your team's actual code and knowledge.
| Tool | Purpose |
|---|---|
| List all spaces accessible to the current user |
| Load a space's full context by owner and name |
gh api (Full CRUD)The Spaces REST API supports creating, updating, deleting spaces, and managing collaborators. The MCP server only exposes read operations, so use gh api for writes.
User Spaces:
| Method | Endpoint | Purpose |
|---|---|---|
|
| Create a space |
|
| List spaces |
|
| Get a space |
|
| Update a space |
|
| Delete a space |
Organization Spaces: Same pattern under /orgs/{org}/copilot-spaces/...
Scope requirements: PAT needs read:user for reads, user for writes.
Note: This API is functional but not yet in the public REST API docs. It may require the copilot_spaces_api feature flag.
When a user asks what spaces are available or you need to find the right space:
This returns all spaces the user can access, each with a name and owner_login. Present relevant matches to the user.
To filter for a specific user's spaces, match owner_login against the username (e.g., "show me my spaces").
When a user names a specific space or you've identified the right one:
This returns the space's full content: attached documentation, code context, custom instructions, and any other curated materials. Use this context to inform your responses.
Space content often references external resources: GitHub issues, dashboards, repos, discussions, or other tools.
Once loaded, use the space content based on what it contains:
If the space contains reference material (docs, code, standards):
If the space contains workflow instructions (templates, step-by-step processes):
gh api)When a user wants to create, update, or delete a space, use gh api. First, find the space number from the list endpoint.
Update a space's instructions:
Update name, description, or instructions together:
Create a new space:
Attach resources (replaces entire resource list):
Delete a space:
Updatable fields: name, description, general_instructions, icon_type, icon_color, resources_attributes
User: "Load the Accessibility copilot space"
Action:
mcp__github__get_copilot_space with owner "github", name "Accessibility"User: "What copilot spaces are available for our team?"
Action:
mcp__github__list_copilot_spacesUser: "Using the security space, what's our policy on secret scanning?"
Action:
mcp__github__get_copilot_space with the appropriate owner and nameUser: "Write my weekly update using the PM Weekly Updates space"
Action:
mcp__github__get_copilot_space to load the space. It contains a template format and step-by-step instructions.User: "Update my PM Weekly Updates space to include a new writing guideline"
Action:
mcp__github__list_copilot_spaces and find the space number (e.g., 19).mcp__github__get_copilot_space to read current instructions.list_copilot_spaces.owner and name.gh api for create/update/delete) require the user PAT scope.{ "id": 123, "_destroy": true } in the array.Get started with chainctlchainctl skill install public/github/copilot-spaces:latest
Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.
skills.cgr.dev/public/github.com/github/skills/copilot-spaces:latest
MIT
HARDENING.md
LICENSE
SKILL.md