All skills
microsoft avatar

/onboard-plugin

@32ab00d official

Scaffold a new plugin and prepare it for distribution. WHEN: 'create a new plugin', 'scaffold a new plugin'

Use this Skill: https://skilld.dev/gh/microsoft/github-copilot-for-azure/onboard-plugin

This session only. Nothing lands on disk.

SKILL.md

≈31 tokens always: the name and description. ≈1.5k when used: this file.

Workflow

This skill provides the end-to-end steps for onboarding a new plugin to this repo. Follow the steps to scaffold a new plugin and make it ready for distribution.

Install dependencies

Install dependencies at the repo root, in tests/ and in scripts/.

# At repo root
npm i
# In tests/
cd tests
npm i
# In scripts/
cd scripts/
npm i

Scaffold the new plugin folder

Ask the skill author to provide a name for the new plugin. Then in <repo-root>/scripts/, run this command to scaffold the common files for a new plugin.

# At <repo-root>/scripts/
cd scripts
npm run plugin:new -- --plugin {plugin-name}

This command creates a plugins/{plugin-name} directory and files in it. Refer to the Plugin Structure section of Onboarding.md to understand what each file is for.

This command adds an entry for the new plugin in tests/skills.json. Nightly scheduled integration tests use this file to discover the plugins and skills to test.

This command adds a new set of path patterns in the pluginPathAllowPattern scripts. The shared telemetry hook script uses these patterns to prevent the script from attempting to send telemetry for skills outside this repo.

Scaffold the skills

Ask the skill author for the names of the skills they plan to add and then scaffold them by running this script for each skill. Try running this command in <repo-root>/scripts with {plugin-name} from the previous step. If the plugin doesn't exist, it may have been renamed. Ask the skill author what plugin name to use.

# At <repo-root>/scripts/
cd scripts
npm run plugin:new-skill -- --plugin {plugin-name} --skill {skill-name}

This command creates a plugins/{plugin-name}/skills/{skill-name}/SKILL.md file and an evals/{plugin-name}/{skill-name}/eval.yaml file. Refer to the Skill Structure section of Onboarding.md to understand what each file is for and what files can be added. It adds two placeholder codeowners and Rick Winter as the codeowner of the corresponding directories. Every new plugin must have at least two distinct codeowner and Rick Winter as a fallback owner.

This command also adds the skill to tests/skills.json nightly integration test schedule.

IMPORTANT: Leave the scaffolded skill as is and don't implement them. Skill authors must implement and test the skills themselves.

Run local integration test

The scaffolded skill includes one example routing test that prompts the agent to load the skill and describe what it does. Do a test run.

First build the plugin from the repo root;

# IMPORTANT: Run this command at the <repo-root>
npm run build

Then use this command in <repo-root>/tests/.

# At <repo-root>/tests/
cd tests
npm run test:vally -- --plugin {plugin-name} --skill {skill-name}

The test should pass. If it fails, ask the skill author to report a bug to microsoft/github-copilot-for-azure.

Prepare for release

The scaffolded plugin and skill files are ready for release by default. Refer to the Releasing section of Onboarding.md for how releases work.

Finish the implementation

Notify the skill author about these next steps to finish onboarding the new plugin.

  • Implement the skills. Add scripts and reference files as appropriate. Follow skill-authoring to implement the skill.
  • Implement the integration tests. Replace the example test with meaningful tests that checks if the skill can be invoked for target user prompts and if it can successfully accomplish their goals in the target scenarios. Follow vally-eval skill on how to author integration tests.
  • Write the human facing content the new plugin. This includes
    • description of the plugin in plugin.json files.
    • keywords of the plugin in plugin.json files
    • the plugin README.md
  • Replace the placeholder codeowners in CODEOWNERS file. Codeowners will be responsible for keeping the plugin up-to-date to make sure it brings value to the users.
  • IMPORTANT: Keep scaffolded files as is except for the ones mentioned above. When unsure, read Onboarding to learn more about the plugin structure.
  • Once all the above are completed, submit a PR with the changes to microsoft/github-copilot-for-azure repo.

Optional next steps

Set up a separate integration test workflow

Tell the skill author that they can host integration tests in a separate GitHub or Azure DevOps repository. This is useful when tests need a dedicated Azure subscription, custom result processing, or extra dependencies.

If they want a separate workflow:

  1. Ask whether they use GitHub Actions or Azure Pipelines.
  2. Read <repo-root>/workflow-templates/Readme.md and follow its user setup instructions.
  3. Copy the matching evaluation-main.yaml starter into the evaluation repository:
    • GitHub Actions: workflow-templates/github/evaluation-main.yaml
    • Azure Pipelines: workflow-templates/azure-devops/evaluation-main.yaml
  4. Pin the template to a reviewed commit SHA rather than main. For GitHub Actions, use the same SHA for the action reference and test-harness-ref. For Azure Pipelines, set the evaluationTemplates repository ref to the SHA.
  5. Help the author configure the GitHub, Azure, and Copilot connections required by their platform. Never request or store token values in source.
  6. Keep the suites under evals/<plugin-name>/<skill-name>/ in the evaluation repository unless the starter's evaluation-directory option is changed.
  7. Run the workflow once. For Azure Pipelines, remind the author to authorize the service connections if the first run prompts for approval.

The starter workflows upload reports and raw Vally results as artifacts. They also identify where to add dependency setup and result post-processing steps.

Source: SKILL.md on GitHub

No alerts7d3 checks · Risk SAFE
  • Gen Agent Trust Hub7d

    This skill provides a workflow for scaffolding new plugins using repository-specific scripts. It includes security considerations regarding the interpolation of user-supplied arguments into shell commands, which is a common pattern for developer tools but warrants awareness.

  • Socket7d

    No alerts

  • Snyk7d

    Risk: LOW · No issues

Signed by skilld at 32ab00d. This ties the file your Agent reads to that commit on GitHub. It does not review the instructions.

Last checked against GitHub 19 hours ago.

Activeupdated yesterday
metadata
{
  "author": "Microsoft",
  "version": "1.1.0"
}

README badge

README badge for microsoft/github-copilot-for-azure/onboard-plugin