pipeline-test-triage
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFE
Full Analysis
- [Secure Credential Management]: The skill utilizes the Azure CLI (
az) to retrieve short-lived access tokens and supports using environment variables for authentication. It explicitly instructs the agent to avoid printing or echoing these credentials, following security best practices for session management. - [Official Service Integration]: The tool interactions and REST API calls are directed to legitimate Azure DevOps domains (such as dev.azure.com and vstmr.dev.azure.com) to fetch build timelines, test results, and logs necessary for the triage process.
- [Automated Log Processing]: The skill includes a specialized PowerShell script,
scripts/Parse-AdoTestLog.ps1, designed to parse downloaded log files. This script performs text cleaning (removing ANSI codes and timestamps) and extracts mocha failure blocks to provide concise summaries for the user. - [Data Ingestion Surface]: The skill is designed to ingest and summarize external pipeline logs, which is a core part of its triage functionality.
- Ingestion points: Pipeline logs are retrieved using automated tools and processed by the provided PowerShell script in
scripts/Parse-AdoTestLog.ps1. - Boundary markers: The skill identifies relevant content using specific log patterns (e.g., mocha failure counts and numbered blocks) to filter noise.
- Capability inventory: The agent has the capability to create or update work items in Azure DevOps and use browser automation to view build results.
- Sanitization: The instructions provide explicit guidance on escaping HTML-like syntax (e.g., using < and >) to ensure that stack traces and error messages are rendered correctly in bug reports without being misinterpreted by the target platform.
Audit Metadata