azure-hosted-copilot-sdk
Pass
Audited by Gen Agent Trust Hub on Mar 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- External Template Scaffolding: The skill utilizes
azd initto scaffold projects from theazure-samples/copilot-sdk-servicerepository. This process downloads project templates and infrastructure-as-code files to the local environment. These templates are hosted by a trusted organization and are part of the standard Azure Developer CLI workflow. - Credential and Token Management: The skill provides guidance on managing sensitive tokens, specifically through
gh auth tokenand Azure Identity libraries. It emphasizes the use ofManagedIdentityCredentialfor production environments to avoid hardcoded secrets, while usingDefaultAzureCredentialfor local development. A script (get-github-token.mjs) is used to facilitate token injection during the deployment process. - Command Execution for Development: Several commands are used to manage the development lifecycle, including
azd,docker, andgh. These tools are necessary for building containers, authenticating with cloud services, and deploying resources. The skill also recommends using MCP tools to query official SDK documentation dynamically. - Indirect Prompt Injection Surface: As the skill is designed to create chat-based applications, it inherently establishes a surface for indirect prompt injection where the resulting application processes untrusted user input. The documentation includes advice on configuring model parameters and system messages, which are key components in managing how the model interprets and responds to input.
Audit Metadata