skills/dotnet/efcore/ci-analysis/Gen Agent Trust Hub

ci-analysis

Pass

Audited by Gen Agent Trust Hub on Mar 30, 2026

Risk Level: SAFE
Full Analysis
  • Official Infrastructure Integration: The skill interacts exclusively with well-known services (Azure DevOps and Helix) used by the .NET project for CI/CD. All network operations target legitimate domains like dev.azure.com and helix.dot.net.
  • Secret Management: The skill documentation and the underlying script identify the HelixAccessToken as a sensitive credential. It includes explicit instructions for the agent to avoid logging, commenting, or otherwise exposing this token in output.
  • Input Validation and Sanitization: The Get-CIStatus.ps1 script implements robust validation for repository names using regular expressions and sanitizes search terms before passing them to the GitHub CLI. This reduces the risk of unintended command behavior.
  • Secure CLI Usage: The skill utilizes official command-line tools (GitHub CLI and Azure CLI) for authenticated actions. It avoids dangerous patterns like piping remote content directly into a shell.
  • Local Data Handling: Caching is implemented using the system's temporary directory with logic for atomic writes and expiration, ensuring that local data management is handled predictably and safely.
  • Analysis Framework: The skill includes an extensive reference library that guides the agent in performing structured investigations, such as binlog comparisons and build progression analysis, using established diagnostic patterns.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 30, 2026, 11:51 PM