setup

Pass

Audited by Gen Agent Trust Hub on Aug 25, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [Command Execution]: The skill executes several bash commands to verify the local environment and configure tools.
  • Environment Checks: It runs node --version, az --version, and az account show to ensure prerequisites like Node.js and Azure CLI are installed and authenticated. These are standard procedures for developer tooling setup.
  • Dynamic Configuration: The skill uses node -e inline scripts to locate its own components and update a local configuration file (~/.copilot/mcp-config.json). This is a common pattern for self-configuring agent tools to ensure proper path resolution across different user environments.
  • [Credential Management]: The skill interacts with Azure authentication via az login and az account get-access-token specifically for the Power Automate resource. These operations rely on the official Azure CLI and direct the user to an official browser-based login flow, which is a secure practice for handling enterprise identities.
  • [Trust Assessment]: All external URLs and tools referenced (e.g., nodejs.org, aka.ms/installazurecliwindows, Microsoft.AzureCLI) are official, well-known, and hosted by trusted organizations, presenting no identified security concerns in this context.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 25, 2026, 03:35 PM
Security Audit — agent-trust-hub — setup