boards-work-item-summary
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- Data Retrieval and Processing: The skill retrieves work item details, relations, and comments from Azure DevOps using specified tools. This behavior is consistent with the skill's intended purpose of providing a summary.
- Privacy Considerations: The instructions specifically mandate that only the display name of assigned users be shown, excluding email addresses, which is a positive privacy practice for handling organizational data.
- Link Construction: The skill generates clickable hyperlinks to Azure DevOps work items using the standard domain format (
dev.azure.com). The construction of these links follows expected patterns for the platform integration. - Information Handling: While the skill processes potentially untrusted data from work item comments or descriptions, its capabilities are limited to summarizing and displaying this information to the user. It does not possess capabilities for file system modification or shell command execution that would facilitate a risk escalation.
Audit Metadata