azure-hosted-copilot-sdk

Pass

Audited by Gen Agent Trust Hub on Feb 27, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [Template Scaffolding]: The skill uses azd init to fetch code from the azure-samples GitHub organization. This is a common practice for initializing projects with official samples provided by the platform.
  • [CLI Tooling]: It relies on industry-standard tools like the Azure CLI (az), GitHub CLI (gh), and Docker to manage application lifecycles and infrastructure.
  • [Credential Management]: Authentication is handled through dynamic token generation using DefaultAzureCredential and gh auth, which is a secure alternative to using hardcoded or static credentials.
  • [Data Ingestion]: The agent is instructed to read local project files such as AGENTS.md and dependency manifests to customize the deployment. This context-gathering is standard for repository-aware skills to ensure configuration matches the user's specific environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 27, 2026, 04:47 AM