cross-repo-discovery
Pass
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/list_azdo_repos.pyexecutes theazandgitcommand-line tools usingsubprocess.runto list projects, fetch metadata, and identify local clones. All subprocess calls use list-based arguments, which effectively prevents command injection vulnerabilities.- [DATA_EXFILTRATION]: The skill performs network operations by calling theazCLI, which communicates with the well-known servicedev.azure.com. It reads and writes project descriptions to Azure DevOps as part of its primary functionality.- [INDIRECT_PROMPT_INJECTION]: The skill presents an attack surface for indirect prompt injection as it processes repository descriptions from Azure DevOps and includes them in a generatedALL_REPOS.mdfile for the agent to read. - Ingestion points:
scripts/list_azdo_repos.pyfetches external project descriptions from Azure DevOps. - Boundary markers: The output is formatted as a Markdown table in
ALL_REPOS.md. - Capability inventory: The skill can perform file system operations and execute
azandgitcommands. - Sanitization: The script does not sanitize the contents of the descriptions before writing them to the summary file.
Audit Metadata