Runs the GitHub Copilot CLI in one-shot prompt mode, locked down so that it can only answer: * No tools: shell, file read, file write, URL fetch, memory and the GitHub MCP server are all denied (--deny-tool). Custom instructions (AGENTS.md etc.) are not loaded. * No filesystem: Copilot runs in a fresh, empty working directory with a fresh,... More info