make-ai-teammate
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [External Resource Downloads]: The skill downloads sample code and development utilities from official Microsoft repositories on GitHub. While downloading code from the internet is a general security consideration, these sources are maintained by the vendor for the purpose of agent development.
- [System Command Execution]: The skill uses shell commands to install dependencies and run project management tasks (e.g.,
npm,dotnet,a365). This requires broad tool permissions, which is expected for an automation utility that configures local development environments. - [Sensitive Configuration Access]: The skill reads and writes to environment files like
.envandappsettings.jsonto manage credentials such as client secrets. Managing secrets locally is a standard practice for this type of tool, and the skill provides guidance on using secure methods like Managed Identity for production. - [Dynamic Code Scaffolding]: The skill generates and modifies source files to implement the Microsoft Agent 365 SDK. This involves writing new application logic to the filesystem, which is the primary purpose of this scaffolding utility.
Audit Metadata