microsoft-agent365-devtools-cli

Pass

Audited by Gen Agent Trust Hub on May 18, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the Microsoft.Agents.A365.DevTools.Cli package via the .NET tool installer and provides links to official Microsoft download pages for the .NET runtime.
  • [COMMAND_EXECUTION]: Provides guidance on executing several shell commands using dotnet, az (Azure CLI), and the a365 tool for managing application life cycles, resource provisioning, and environment configuration.
  • [DATA_EXFILTRATION]: The skill manages sensitive identifiers such as Azure Subscription IDs, Client IDs, and Tenant IDs. It appropriately recommends using environment variables and local configuration files for these secrets rather than hardcoding them, adhering to best practices for development tools.
  • [PROMPT_INJECTION]: The skill describes processes that ingest external data (e.g., agent-manifest.json and environment variables) to perform deployments and other automated tasks. While this constitutes an indirect prompt injection surface, it is necessary for the tool's primary purpose and no malicious patterns were detected.
  • Ingestion points: agent-manifest.json file and environment variables like AGENT365_CLIENT_ID (SKILL.md).
  • Boundary markers: Not explicitly specified in the instructional text.
  • Capability inventory: Shell command execution via a365 and az, network communication for Azure deployments, and file system reads/writes for configuration.
  • Sanitization: Not addressed in the usage-focused documentation.
Audit Metadata
Risk Level
SAFE
Analyzed
May 18, 2026, 11:56 PM