ado
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill is primarily a wrapper for the Azure CLI extension, facilitating PowerShell commands for Azure DevOps lifecycle management including boards, repos, and pipelines.
- [DATA_EXFILTRATION]: Configuration parameters and project metadata are stored in a local file
ado\config.json. The documentation explicitly recommends using.gitignoreto protect this metadata from exposure in source control. - [SAFE]: The skill utilizes established authentication mechanisms through
az loginand official CLI extensions. No obfuscation, malicious remote code patterns, or unauthorized exfiltration behaviors were found. While the skill processes data from Azure DevOps (an indirect prompt injection surface), the risk is mitigated by the use of structured CLI parameters and standard agent runtime protections.
Audit Metadata