setup-copilot-devcontainer
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches the GitHub Copilot CLI installer from
https://gh.io/copilot-install. This is the official shortened URL for GitHub's installer script. - [REMOTE_CODE_EXECUTION]: When the optional 'Automatic skill sync' feature is enabled, the skill configures the container to run
npx -y skills addon every startup. This command fetches and executes logic from user-defined external sources to synchronize agent capabilities. - [COMMAND_EXECUTION]: The skill modifies devcontainer lifecycle scripts (
post-create.sh,post-start.sh) and the shell profile (.bashrc) to install the CLI, export environment variables likeCOPILOT_AUTO_UPDATE, and create manual-invocation aliases. - [PERSISTENCE]: The installation and synchronization logic is appended to devcontainer hook scripts, ensuring that the setup persists across container rebuilds and restarts.
- [INDIRECT_PROMPT_INJECTION]: The skill creates a surface for indirect instructions by allowing the agent to ingest and sync skills from external repositories. The skill documents this trust boundary explicitly and includes a live validation step (
npx -y skills add <source> --list) to verify sources before deployment. - [SAFE]: Static analysis identified a potentially destructive command (
rm -rf) inSKILL.md. Technical review confirms this is a documentation note advising users how to clean up leftovers from a deprecated version of the skill, and it is not part of the skill's automated execution.
Audit Metadata