microsoft-agent365-devtools-cli
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
Microsoft.Agents.A365.DevTools.Clipackage via the .NET tool installer and provides links to official Microsoft download pages for the .NET runtime. - [COMMAND_EXECUTION]: Provides guidance on executing several shell commands using
dotnet,az(Azure CLI), and thea365tool for managing application life cycles, resource provisioning, and environment configuration. - [DATA_EXFILTRATION]: The skill manages sensitive identifiers such as Azure Subscription IDs, Client IDs, and Tenant IDs. It appropriately recommends using environment variables and local configuration files for these secrets rather than hardcoding them, adhering to best practices for development tools.
- [PROMPT_INJECTION]: The skill describes processes that ingest external data (e.g.,
agent-manifest.jsonand environment variables) to perform deployments and other automated tasks. While this constitutes an indirect prompt injection surface, it is necessary for the tool's primary purpose and no malicious patterns were detected. - Ingestion points:
agent-manifest.jsonfile and environment variables likeAGENT365_CLIENT_ID(SKILL.md). - Boundary markers: Not explicitly specified in the instructional text.
- Capability inventory: Shell command execution via
a365andaz, network communication for Azure deployments, and file system reads/writes for configuration. - Sanitization: Not addressed in the usage-focused documentation.
Audit Metadata