azure-hosted-copilot-sdk
Pass
Audited by Gen Agent Trust Hub on Feb 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [Template Scaffolding]: The skill uses
azd initto fetch code from theazure-samplesGitHub organization. This is a common practice for initializing projects with official samples provided by the platform. - [CLI Tooling]: It relies on industry-standard tools like the Azure CLI (
az), GitHub CLI (gh), and Docker to manage application lifecycles and infrastructure. - [Credential Management]: Authentication is handled through dynamic token generation using
DefaultAzureCredentialandgh auth, which is a secure alternative to using hardcoded or static credentials. - [Data Ingestion]: The agent is instructed to read local project files such as
AGENTS.mdand dependency manifests to customize the deployment. This context-gathering is standard for repository-aware skills to ensure configuration matches the user's specific environment.
Audit Metadata