copilot-sdk

Fail

Audited by Runlayer on Feb 21, 2026

Risk Level: HIGH
Scan Summary
Max Score
92%
Files
2
Flagged
2
Chunks
5
Flagged Files (2)
SKILL.mdHIGH
91.8%

Tool passed security scan

Malicious tool definition detected

Tool: SKILL.md [3/4] Description: `"2024-10-21"`) | ### Azure Managed Identity with BYOK Use `DefaultAzureCredential` to get short-lived bearer tokens for Azure deployments: ```python from azure.identity import DefaultAzureCredential from copilot import CopilotClient, ProviderConfig, SessionConfig credential = DefaultAzureCredential() token = credential.get_token("https://cognitiveservices.azure.com/.default").token session = await client.create_session(SessionConfig( model="gpt-4.1", provider=P

references/acceptance-criteria.mdLOW
33.2%

Tool passed security scan

Audit Metadata
Max File Score
92%
Classification
UNKNOWN_SERVER
Files Scanned
2
Files Flagged
2
Chunks Analyzed
5
Analyzed
Feb 21, 2026, 05:35 PM
Security Audit — runlayer — copilot-sdk