teams-sdk-project
Pass
Audited by Gen Agent Trust Hub on Mar 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the 'teams2' CLI directly from the author's GitHub repository releases (github.com/heyitsaamir/teamscli).
- [EXTERNAL_DOWNLOADS]: Downloads the 'devtunnel' tool from Microsoft's official Homebrew tap, which is a trusted organization source.
- [REMOTE_CODE_EXECUTION]: Installs the 'teams2' global Node.js package from a remote compressed archive (.tgz) hosted on GitHub.
- [COMMAND_EXECUTION]: Executes system commands to create and host development tunnels using 'devtunnel'.
- [COMMAND_EXECUTION]: Utilizes the 'teams2' CLI to perform Azure AD authentication and application registration, including writing generated credentials to a local '.env' file.
- [COMMAND_EXECUTION]: Runs 'npm install' to set up project dependencies in the scaffolded directory.
Audit Metadata