Zum Hauptinhalt springen
Echtzeit-Radar & Feeds
Alle RSS Feeds ➔
👥 Community & Social
Windows Tipps & SecurityGrafikkarte vor Überhitzung schützen: So geht’s(25.09.2026 um 08:00 Uhr)
••••••••••
Windows Tipps & SecurityGrafikkarte vor Überhitzung schützen: So geht’s(25.09.2026 um 08:00 Uhr)
••••••••••
Intelligence View
⚡ tsecurity.de Intelligence

GitHub Copilot AI Agents: The Secret to 10x Engineering in 2026

In this article, I’ll show you how to unlock the full power of GitHub Copilot agents inside VS Code. There are actually three main types of Copilot agents-most people only know about one, but I’m going to show you all of them. By the end, y…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!

In this article, I’ll show you how to unlock the full power of GitHub Copilot agents inside VS Code. There are actually three main types of Copilot agents-most people only know about one, but I’m going to show you all of them. By the end, you’ll be able to create custom agents that act as your own specialized “sub-agents.”






Getting Started: The Setup



Before we dive into the agents, make sure your environment is ready.





  1. Update VS Code: Ensure you are on the latest version.


  2. Enable Agent Settings: Go to your VS Code settings and search for “chat agent.” You should enable: 




  • Third-party coding agents

  • Background agents

  • Cloud agents

  • Agent skills



Getting Started: The Setup



I also recommend enabling the “integrated browser agent tool.” Even though I won’t deep-dive into it here, it allows your agents to browse the web to find documentation or test your UI.






What are GitHub Copilot Agents?



An agent is different from a standard LLM chat. While a chat answers questions, an agent uses tools to perform actions.





  • Autonomy: They can search your codebase, read files, and (in some modes) edit code or run terminal commands.


  • Context-Awareness: They don’t just see the snippet you’re looking at; they can “walk” the file tree to understand dependencies.


  • The “Brain”: Powered by high-reasoning models like Claude 4.7 Sonnet or GPT-5.4.






The 3 Types of Copilot Agents



Once your settings are enabled, you’ll see a dropdown in the chat window.



The 3 Types of Copilot Agents



 There are three primary categories:






1. Local Agents



These run interactively inside VS Code. They have “strong workspace awareness,” meaning they know exactly what files you have open.





  • Best for: Brainstorming, understanding a codebase, and running multiple sessions with different models to see which one gives the best answer.






2. Background Agents (Copilot CLI)



These are autonomous. They run on your machine in the background while you keep working on other things.





  • Best for: Executing a well-defined plan or fixing a specific bug on a different branch while you stay focused on your main task.






3. Cloud Agents



These run remotely on GitHub’s servers.





  • Best for: Collaboration. You can start a task, close your laptop, and your teammate can pick it up from another computer. It keeps your local environment free.






Building Your Own Custom Agent



If you want to move beyond the general assistant, you can create Custom Agents. Think of these as specialists-you could have a “Front-End Expert,” a “Doc Writer,” or a “Code Reviewer.”



Custom agents are defined by a .agent.md file. This is a Markdown file with a YAML header that acts as the "DNA" of your agent.






Where to put the file:





  • Project Level: .github/agents/my-agent.agent.md (Shared with the team).


  • User Level: ~/.copilot/agents/my-agent.agent.md (Personal use).



How to create one:




  • Open the agent dropdown in the bottom right corner of the chat.



How to create one



Select “Create New Sub Agent.”



How to create one




  1. You can either write it from scratch or let Copilot generate a template for you.

  2. You’ll get a simple file (often in .mdx or .yml format). Here, you define:





  • The Role: Who is this agent?


  • The Tools: What can it access?


  • Instructions: Specific rules it must follow.



The Anatomy of .agent.md




---  
name: Security Scout
description: "Specialized in finding SQLi and XSS vulnerabilities. "
tools: [read, search]
model: claude-4.7-sonnet
---

# Instructions
You are a Senior Security Engineer.
1. Always check `/src/auth` first.
2. Focus on inputs that are not sanitized.
3. Provide a remediation plan for every bug found.md







1. Description = Routing Key



This is critical.



The system uses the description to decide:




“Should I use this agent?”




Bad:




description: Helps with code






Good:




description: Refactors TypeScript backend services for performance and async safety






Be specific. This directly impacts agent selection and delegation quality.






2. Tools = Capability Boundary



tools: ["read", "search"]





  • read → open files


  • search → navigate repo


  • edit → modify code


  • execute → run commands



Rule: Default to least privilege.






3. Prompt Body = Behavior Contract



This defines:




  • Scope (what it can touch)

  • Process (how it works)

  • Output format (what it returns)



Treat it like:




“System design for a junior engineer that never sleeps.”




Once you save that file, the agent appears in your menu immediately. 



You can also download existing custom agents from Copilot Agent Library https://github.com/proflead/copilot-agent-library






Using Agents in Copilot CLI



copilot --agent security-scout --prompt "Scan auth module"



Or let it infer based on the description.






/agent Command



Inside interactive CLI:



/agent




  • Create or select agents

  • Manage profiles

  • Switch context mid-session






Plan vs Autopilot






Plan Mode




  • The agent proposes steps

  • You approve before execution



Best for:




  • Risky changes

  • Learning/debugging






Autopilot Mode




  • Agent executes end-to-end

  • Minimal intervention



Best for:




  • Repetitive tasks

  • CI/CD automation



Treat autopilot like: “sudo for AI”






Using Agents in VS Code



In VS Code, agents live inside the Chat Panel and the new Agent Mode.





  • Agent Mode: Click the “Agent” toggle in the chat. This allows Copilot to perform “Multi-file Edits.”


  • File Mentions: Use #file or #codebase to give the agent a specific context.


  • Custom Agents: Use the agent picker (the dropdown at the top of the chat) to select your .agent.md personas.


  • Tip: If your custom agent isn’t showing up, ensure your settings.json has the absolute path: "chat.agentFilesLocations": ["/Users/vladislav/my-agents"]






Video Tutorial



If you want to see step-by-step examples and a detailed explanation, watch my video tutorial below:





Watch on YouTube: GitHub Copilot Agents






Final Thoughts



Using multiple specialized agents is a skill that will set you apart as a developer. It makes your workflow clearer and much more powerful. If you haven’t tried creating a sub-agent yet, I highly recommend starting today!



Cheers, proflead! ;)

1. Sofort-Triage & Abwehrmaßnahmen

SOC Incident Playbook: Vulnerability Remediation & Verification
Syntax validiert (0 Fehler)
title: Detect Exploitation - GitHub Copilot AI Agents: The Secret to 10x Engineering in 2026
id: 63924516-ddfc-4c11-9923-47f6a6ef61dd
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-27
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access
  - attack.t1190
Syntax validiert (0 Fehler)
rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-27"
        description = "YARA Signature for "
    strings:
        $str = "GitHub Copilot AI Agents: The " ascii wide
    condition:
        any of them
}
Syntax validiert (0 Fehler)
index=security sourcetype IN ("cisco:asa", "pan:traffic", "zeek_conn", "suricata", "WinEventLog:Security")
("GitHub Copilot AI Agents The Secret to 1")
| stats count earliest(_time) as first_seen latest(_time) as last_seen by src_ip, dest_ip, dest_host, signature
| eval first_seen=strftime(first_seen, "%Y-%m-%d %H:%M:%S"), last_seen=strftime(last_seen, "%Y-%m-%d %H:%M:%S")
| sort - count
Syntax validiert (0 Fehler)
message: "*GitHub Copilot AI Agents The Secret to 1*"
Syntax validiert (0 Fehler)
CommonSecurityLog
| where Message has "GitHub Copilot AI Agents The Secret to 1"
| summarize EventCount = count(), FirstSeen = min(TimeGenerated), LastSeen = max(TimeGenerated) by SourceIP, DestinationIP, DestinationPort, Activity
| extend DetectionRule = "iShareStuff-CTI-Compiled"
| sort by EventCount desc

2. Cyber Threat Intelligence & Forensik

CTI Threat Relationship Graph4 Knoten / 3 Relationen
CVE / Incident Software MITRE ATT&CK CWE Weakness IoC
🎯
MITRE ATT&CK Matrix Navigator 14 Taktiken
Identifiziert: T1190Exploit Public-Facing Application
Reconnaissance
-
Resource Development
-
Initial Access
Execution
Persistence
-
Privilege Escalation
Defense Evasion
Credential Access
-
Discovery
-
Lateral Movement
-
Collection
-
Command and Control
Exfiltration
-
Impact
tsecurity.de Cognitive Threat RAG
Fokus-Vektor:

Analyse für identifizierte Bedrohung auf Basis von Live-CTI (ENISA EUVD): CVSS 0.0 · EPSS 0.0% · CISA KEV: nein. Handlungsableitung aus den verlinkten Hersteller-Quellen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

⚡ Empfohlene Sofortmaßnahmen
  • 1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
  • 2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
  • 3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten GitHub Copilot AI Agents: The Secret to 10x Engineering in 2026

Thematisch verwandte Begriffe: GitHub, Copilot, Agents, Secret · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

💬 Kommentare werden geladen…
Zum Aktualisieren ziehen
ZERO-DAY CVE-2025-71424 | Contrast, Edgeless Systems' runtime for confidential containers on Kuber…
Advisory →
tsecurity.de Icon
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag