Manage GitHub Copilot skills for your team
Approve a skill once and it lands in GitHub Copilot on every developer's machine, at the approved version. Ban one and it's removed everywhere. Every run is recorded in a tamper-evident audit log.
- Skills, every project
- ~/.copilot/skills
- Skills, in a repository
- .github/skills
- Also installed
- Subagents
- Blocks at invocation
- No hook to refuse a skill; banned skills are removed
Copilot reads repository skills from .github/skills and subagents from .github/agents, next to its custom instructions.
Set it up
Paste this into GitHub Copilot. It reads the setup guide, installs what it needs and asks you to sign in once:
Or by hand, from a terminal:
Questions
- Where does GitHub Copilot look for skills?
- For every project: ~/.copilot/skills. Inside a repository: .github/skills.
- Can skillsvault block a skill in GitHub Copilot?
- skillsvault removes banned skills from GitHub Copilot's folders on every machine and never installs them. GitHub Copilot has no hook that can refuse a skill at the moment it runs, so a skill someone copies in by hand isn't stopped at invocation; skillsvault's scan reports it.
- What does skillsvault install into GitHub Copilot?
- Your organisation's approved skills, subagents (~/.copilot/agents), each at the version the registry approves.
- Is it free?
- Free for one developer. Teams pay per member: €20 a month on Team, €40 on Business.
One registry for all of them
The same approved list reaches every agent your team uses.
Start with the skills you already have
skillsvault scan lists every skill on this machine across all your agents and flags the risky ones. It runs locally, with no account.