setup
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [Command Execution]: The skill executes several bash commands to verify the local environment and configure tools.
- Environment Checks: It runs
node --version,az --version, andaz account showto ensure prerequisites like Node.js and Azure CLI are installed and authenticated. These are standard procedures for developer tooling setup. - Dynamic Configuration: The skill uses
node -einline scripts to locate its own components and update a local configuration file (~/.copilot/mcp-config.json). This is a common pattern for self-configuring agent tools to ensure proper path resolution across different user environments. - [Credential Management]: The skill interacts with Azure authentication via
az loginandaz account get-access-tokenspecifically for the Power Automate resource. These operations rely on the official Azure CLI and direct the user to an official browser-based login flow, which is a secure practice for handling enterprise identities. - [Trust Assessment]: All external URLs and tools referenced (e.g.,
nodejs.org,aka.ms/installazurecliwindows,Microsoft.AzureCLI) are official, well-known, and hosted by trusted organizations, presenting no identified security concerns in this context.
Audit Metadata