update-os-coverage
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- External Data Retrieval: The skill fetches configuration and policy data from external sources using
curl. These sources include official GitHub repositories and a well-known service for operating system lifecycle data. - Evidence:
curl -sL https://github.com/dotnet/versions/raw/refs/heads/main/build-info/docker/image-info.dotnet-dotnet-buildtools-prereqs-docker-main.jsonused for verifying container tags.curl -sL https://github.com/dotnet/core/raw/refs/heads/main/release-notes/<dotnet-version>/supported-os.jsonused for checking support policy.curl -s https://endoflife.date/api/<distro-id>.jsonused for lifecycle auditing.- Command Execution: The skill provides command-line snippets for searching files and validating data. These commands use standard utilities to process project-specific files.
- Evidence:
- Uses
grepto scan for OS references in pipeline files likeeng/pipelines/helix-platforms.ymlandeng/pipelines/libraries/helix-queues-setup.yml. - Uses
jqto parse and validate the JSON data retrieved from network operations. - Uses
gh(GitHub CLI) to search for issues and create pull requests for the proposed changes.
Audit Metadata