azure-hosted-copilot-sdk

Pass

Audited by Gen Agent Trust Hub on Mar 4, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • External Template Scaffolding: The skill utilizes azd init to scaffold projects from the azure-samples/copilot-sdk-service repository. This process downloads project templates and infrastructure-as-code files to the local environment. These templates are hosted by a trusted organization and are part of the standard Azure Developer CLI workflow.
  • Credential and Token Management: The skill provides guidance on managing sensitive tokens, specifically through gh auth token and Azure Identity libraries. It emphasizes the use of ManagedIdentityCredential for production environments to avoid hardcoded secrets, while using DefaultAzureCredential for local development. A script (get-github-token.mjs) is used to facilitate token injection during the deployment process.
  • Command Execution for Development: Several commands are used to manage the development lifecycle, including azd, docker, and gh. These tools are necessary for building containers, authenticating with cloud services, and deploying resources. The skill also recommends using MCP tools to query official SDK documentation dynamically.
  • Indirect Prompt Injection Surface: As the skill is designed to create chat-based applications, it inherently establishes a surface for indirect prompt injection where the resulting application processes untrusted user input. The documentation includes advice on configuring model parameters and system messages, which are key components in managing how the model interprets and responds to input.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 4, 2026, 09:36 PM