Custom Agent Assets for AppSec Demo

This folder contains reusable GitHub Copilot customization assets for a 1-hour AppSec talk.

What is included

copilot-instructions.md: Workspace-level defaults for AppSec demo behavior.
instructions/appsec-demo.instructions.md: Task and file-scoped instructions for security analysis and remediation suggestions.
agents/appsec-triage.agent.md: Custom agent focused on evidence-based vulnerability triage.
agents/remediation-coach.agent.md: Custom agent focused on minimal, reviewable patch suggestions.
skills/vulnerability-discovery/SKILL.md: Structured discovery workflow.
skills/secure-patch-suggestion/SKILL.md: Patch suggestion workflow.
skills/remediation-validation/SKILL.md: Post-fix validation workflow.
skills/runtime-remediation/SKILL.md: Controlled live code-edit workflow for demo apply mode.

Run analysis with AppSec Triage Agent.
Produce patch suggestions with Remediation Coach Agent.
Optionally switch to apply mode for runtime edits with runtime-remediation.
Re-check findings against the baseline standard in docs/appsec-demo/appsec-baseline-standard.md.

Best practice for demos:

Explicitly select the target custom agent before each prompt.
Explicitly invoke skills (/vulnerability-discovery, /secure-patch-suggestion, /runtime-remediation, /remediation-validation) instead of relying on implicit routing.

Scripted option for live runtime edits:

Speaker support:

These assets are demo-oriented and intentionally lightweight.
Default behavior is suggestion-only remediation.
Apply mode is supported when explicitly requested, with reversible-edit and rollback guidance.

Name		Name	Last commit message	Last commit date
.devcontainer		.devcontainer
.github		.github
app		app
artifacts/precomputed		artifacts/precomputed
data/documents		data/documents
docs		docs
experiments		experiments
regression_testing		regression_testing
static		static
templates		templates
tests		tests
.env		.env
.env.template		.env.template
.gitignore		.gitignore
CODESPACES_SETUP.md		CODESPACES_SETUP.md
EXERCISE_6_INTEGRATION_GUIDE.md		EXERCISE_6_INTEGRATION_GUIDE.md
README.md		README.md
appsec_runtime_remediation_demo.py		appsec_runtime_remediation_demo.py
generate_classroom_traces.py		generate_classroom_traces.py
launch.py		launch.py
prepare_exercise_artifacts.py		prepare_exercise_artifacts.py
requirements.txt		requirements.txt
run.py		run.py
section7_nfr_quickrun.py		section7_nfr_quickrun.py
section9_agentic_test_suite.py		section9_agentic_test_suite.py
temperature_demo.py		temperature_demo.py
trace_visualization_demo.py		trace_visualization_demo.py
verify_exercise_readiness.py		verify_exercise_readiness.py