ado-install

Warn

Audited by Gen Agent Trust Hub on Jun 24, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill modifies system-level shell initialization files, specifically ~/.zshrc on macOS and the PowerShell $PROFILE on Windows, to export and persist environment variables.
  • [PERSISTENCE]: It creates and registers macOS LaunchAgents (~/Library/LaunchAgents/setenv.{SERVER_KEY}.plist) to ensure that credentials are persistently loaded into the user session for GUI applications like Cursor.
  • [REMOTE_CODE_EXECUTION]: The skill uses npx -y @azure-devops/mcp to download and run the Azure DevOps MCP server code directly from the NPM registry.
  • [EXTERNAL_DOWNLOADS]: Automates network connectivity tests via curl and Invoke-WebRequest to dev.azure.com (a well-known service) to validate user-provided Personal Access Tokens (PATs).
  • [COMMAND_EXECUTION]: Instructions explicitly direct the agent to perform verification and system modification steps silently ('internally') and 'not show them to the user', which reduces oversight during privileged operations.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 24, 2026, 06:33 PM
Security Audit — agent-trust-hub — ado-install