add-server-logic
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFE
Full Analysis
- Standard Command Execution: The skill executes several internal Node.js scripts (e.g.,
check-version.js,list-custom-actions.js,create-serverlogic-metadata.js) located within the plugin's installation directory. These scripts are utilized to perform project configuration, metadata generation, and environment checks, which is standard behavior for this type of developer tool. - Trusted Data Ingestion: The workflow involves fetching the latest documentation and code samples from Microsoft Learn. This ensures the generated code follows the most current SDK patterns. This process targets official Microsoft documentation services and incorporates the data into the agent's context to guide implementation.
- Project Context Exploration: An automated agent is used to analyze the user's existing codebase for patterns and requirements. This exploration allows the skill to integrate new server-side logic seamlessly with the existing project structure and security model.
- Secure Secret Management: The skill provides a structured workflow for managing sensitive values, such as API keys and credentials, specifically recommending Azure Key Vault. It includes instructions to ensure these secrets are never hardcoded in source code or passed directly through the conversation.
- Code Generation and Validation: The skill generates server-side JavaScript code and metadata YAML files. It includes a validation phase to ensure the output conforms to platform constraints and security requirements, such as mandatory error handling (try/catch blocks), diagnostic logging, and the use of restricted runtime APIs.
Audit Metadata