a365-setup
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- Remote Script Execution: The skill utilizes shell commands to download and execute installation scripts for developer tools. Specifically, it fetches scripts for the 'uv' package manager from astral.sh and the Azure CLI from aka.ms. These are widely recognized sources within the developer community for these tools.
- Command Execution and Tooling: This skill executes various CLI tools including dotnet, az, a365, npm, and pwsh to manage environment setup and project registration. These operations are core to the skill's functionality as a setup assistant.
- Local File Access and Configuration: To detect the agent stack and project state, the skill reads various local files such as package.json, .csproj, manifest.json, and .env. This information is used to determine project types and verify existing configurations during the onboarding process.
- Administrative Privilege Usage: On Linux systems, the skill may use sudo to install the Azure CLI. This is a standard procedure for system-level tool installations that require administrative access.
Audit Metadata