skills/ianphil/my-skills/ado/Gen Agent Trust Hub

ado

Pass

Audited by Gen Agent Trust Hub on Mar 29, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill is primarily a wrapper for the Azure CLI extension, facilitating PowerShell commands for Azure DevOps lifecycle management including boards, repos, and pipelines.
  • [DATA_EXFILTRATION]: Configuration parameters and project metadata are stored in a local file ado\config.json. The documentation explicitly recommends using .gitignore to protect this metadata from exposure in source control.
  • [SAFE]: The skill utilizes established authentication mechanisms through az login and official CLI extensions. No obfuscation, malicious remote code patterns, or unauthorized exfiltration behaviors were found. While the skill processes data from Azure DevOps (an indirect prompt injection surface), the risk is mitigated by the use of structured CLI parameters and standard agent runtime protections.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 29, 2026, 03:29 AM