azure-hosted-copilot-sdk
Pass
Audited by Gen Agent Trust Hub on Apr 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- Standard Template Acquisition: The skill utilizes the Azure Developer CLI (
azd init) to scaffold projects from well-known template repositories. This is a routine operation for cloud resource provisioning and follows established developer workflows. - Integration with Development Tools: Employs established command-line interfaces such as the Azure CLI (
az) and GitHub CLI (gh) to manage service deployments and authentication flows. These tools are used for their intended administrative purposes. - Authentication Best Practices: Includes comprehensive guidance on transitioning from development-time credentials to production-ready Managed Identities, promoting secure identity management and reducing the risk of credential exposure.
- Project File Ingestion: The instructions involve reading local project metadata (such as
AGENTS.md) to inform the scaffolding process. While this identifies a point where external data enters the context, it is a standard practice for project-aware development tools.
Audit Metadata