ado-install
Warn
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill modifies system-level shell initialization files, specifically
~/.zshrcon macOS and the PowerShell$PROFILEon Windows, to export and persist environment variables. - [PERSISTENCE]: It creates and registers macOS LaunchAgents (
~/Library/LaunchAgents/setenv.{SERVER_KEY}.plist) to ensure that credentials are persistently loaded into the user session for GUI applications like Cursor. - [REMOTE_CODE_EXECUTION]: The skill uses
npx -y @azure-devops/mcpto download and run the Azure DevOps MCP server code directly from the NPM registry. - [EXTERNAL_DOWNLOADS]: Automates network connectivity tests via
curlandInvoke-WebRequesttodev.azure.com(a well-known service) to validate user-provided Personal Access Tokens (PATs). - [COMMAND_EXECUTION]: Instructions explicitly direct the agent to perform verification and system modification steps silently ('internally') and 'not show them to the user', which reduces oversight during privileged operations.
Audit Metadata