ci-analysis
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFE
Full Analysis
- Official Infrastructure Integration: The skill interacts exclusively with well-known services (Azure DevOps and Helix) used by the .NET project for CI/CD. All network operations target legitimate domains like dev.azure.com and helix.dot.net.
- Secret Management: The skill documentation and the underlying script identify the
HelixAccessTokenas a sensitive credential. It includes explicit instructions for the agent to avoid logging, commenting, or otherwise exposing this token in output. - Input Validation and Sanitization: The
Get-CIStatus.ps1script implements robust validation for repository names using regular expressions and sanitizes search terms before passing them to the GitHub CLI. This reduces the risk of unintended command behavior. - Secure CLI Usage: The skill utilizes official command-line tools (GitHub CLI and Azure CLI) for authenticated actions. It avoids dangerous patterns like piping remote content directly into a shell.
- Local Data Handling: Caching is implemented using the system's temporary directory with logic for atomic writes and expiration, ensuring that local data management is handled predictably and safely.
- Analysis Framework: The skill includes an extensive reference library that guides the agent in performing structured investigations, such as binlog comparisons and build progression analysis, using established diagnostic patterns.
Audit Metadata