create-api-review-pr

Pass

Audited by Gen Agent Trust Hub on Jul 10, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: Executes the local script scripts/api_md_workflow/create_api_review_pr.py to compare API surfaces and generate draft Pull Requests.
  • [COMMAND_EXECUTION]: Runs a local PowerShell script ./eng/common/mcp/azure-sdk-mcp.ps1 to automate the installation and update of the azsdk CLI tool when necessary.
  • [COMMAND_EXECUTION]: Installs local Python dependencies and tools using pip install for paths such as ./eng/tools/azure-sdk-tools and requirement files like ./eng/apiview_reqs.txt.
  • [COMMAND_EXECUTION]: Utilizes system binaries including git (for tag and status validation) and the gh CLI (for Pull Request creation and authentication).
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 10, 2026, 09:48 AM
Security Audit — agent-trust-hub — create-api-review-pr