make-a365-agent
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- Remote Script Installation: The skill automates the installation of the Microsoft Dev Tunnel CLI for Linux users using a scripted installation pattern (
curl | bash). While executing remote scripts is a security consideration, this specific script is fetched from a well-known Microsoft domain (aka.ms) and is a standard method for distributing this official utility. - Command Execution for Provisioning: The skill executes several shell commands to manage the lifecycle of an agent's registration, including
a365 setupanddevtunnelcommands. These actions are used to create blueprints, set up Entra ID permissions, and host local endpoints for development, which are core features of the intended provisioning process. - Network Configuration and Tunnels: To support local development, the skill creates and hosts public dev tunnels (
devtunnels.ms). This allows local agents to receive messages from external services during the registration and testing phase. Users should be aware that this creates a temporary public endpoint for their local service. - Local Workspace Configuration: The skill reads and writes to local configuration files (such as
a365.generated.config.jsonand.a365-workspace-detection.local.json) to persist state and blueprint IDs between sessions. This is a standard practice for maintaining environment context within a developer project.
Audit Metadata