# GitHub Copilot CLI

> GitHub Copilot CLI is an officially published AI tool from GitHub. Anomity scores its risk at 10 out of 100 (low).

- **Canonical URL:** https://catalog.anomity.ai/agent/copilot-cli
- **Kind:** AI tool
- **Publisher:** GitHub
- **Trust level:** official
- **Risk score:** 10/100 (low)
- **Website:** https://github.com/features/copilot
- **Last updated:** 2026-09-02
- **JSON:** https://catalog.anomity.ai/api/entries/agent/copilot-cli

## Description

GitHub AI coding agent with MCP and permissions config

## Why it scored 10

The score starts at the catalog's neutral base of 50 and moves only through the signals below. The formula is published at https://catalog.anomity.ai/about — there is no model and no hidden heuristic.

| Signal | Contribution | Severity | Evidence |
| --- | --- | --- | --- |
| Published by the vendor | -40 | trust offset |  |

Clamped result: **10/100**, band **low**.

## Configuration surface

Files this tool reads on the host. Anything written here changes what the agent does next.

- `copilot-cli-mcp` — MCP server configuration
    - win32: `${USERPROFILE}\.copilot\mcp-config.json`
    - darwin: `${HOME}/.copilot/mcp-config.json`
    - linux: `${HOME}/.copilot/mcp-config.json`
- `copilot-cli-permissions` — Permissions configuration
    - win32: `${USERPROFILE}\.copilot\permissions-config.json`
    - darwin: `${HOME}/.copilot/permissions-config.json`
    - linux: `${HOME}/.copilot/permissions-config.json`
- `copilot-cli-config` — CLI self-managed config (trustedFolders, loggedInUsers)
    - win32: `${USERPROFILE}\.copilot\config.json`
    - darwin: `${HOME}/.copilot/config.json`
    - linux: `${HOME}/.copilot/config.json`
- `copilot-cli-settings` — Optional user settings overrides
    - win32: `${USERPROFILE}\.copilot\settings.json`
    - darwin: `${HOME}/.copilot/settings.json`
    - linux: `${HOME}/.copilot/settings.json`
- `copilot-user-instructions` — User-level custom instructions
    - win32: `${USERPROFILE}\.copilot\copilot-instructions.md`
    - darwin: `${HOME}/.copilot/copilot-instructions.md`
    - linux: `${HOME}/.copilot/copilot-instructions.md`
- `copilot-repo-instructions` — Repository-wide Copilot instructions
    - win32: `${PROJECT}\.github\copilot-instructions.md`
    - darwin: `${PROJECT}/.github/copilot-instructions.md`
    - linux: `${PROJECT}/.github/copilot-instructions.md`
- `copilot-path-instructions` — Path-scoped Copilot instructions (with applyTo glob)
- `copilot-project-skills` — Project skills (.github/skills, .claude/skills, .agents/skills)
- `copilot-user-skills` — Personal skills shared across projects
- `copilot-intellij-skills` — Copilot skills installed by the JetBrains IDE plugin (~/.copilot/intellij-skills/ — SKILL.md often ships description-only, named by directory)
- `copilot-user-subagents` — User-scope custom agents (~/.copilot/agents/*.agent.md — own tool allowlist)
- `copilot-project-subagents` — Project custom agents (.github/agents/*.agent.md)

## Related AI tools

- [AdaL](https://catalog.anomity.ai/agent/adal) — risk 10 (low)
- [Agent Zero](https://catalog.anomity.ai/agent/agent-zero) — risk 10 (low)
- [Aide](https://catalog.anomity.ai/agent/aide) — risk 10 (low)
- [Aider](https://catalog.anomity.ai/agent/aider) — risk 10 (low)
- [AiderDesk](https://catalog.anomity.ai/agent/aider-desk) — risk 10 (low)
- [Amazon Q Developer](https://catalog.anomity.ai/agent/amazon-q) — risk 10 (low)

---

Source: Anomity Catalog (https://catalog.anomity.ai/). Scoring methodology: https://catalog.anomity.ai/about. Machine-readable index: https://catalog.anomity.ai/llms.txt · https://catalog.anomity.ai/openapi.json