agent-package-manager
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the APM CLI installation scripts and official documentation from trusted Microsoft domains and GitHub-hosted resources.- [COMMAND_EXECUTION]: Executes various local
apmcommands to perform package installation, project initialization, script execution (apm run), and environment validation.- [REMOTE_CODE_EXECUTION]: Includes a bootstrap procedure to download and pipe installation scripts from a well-known Microsoft shortlink service (aka.ms) to the shell or PowerShell, which is used to set up the required toolset.
Audit Metadata