workitem

Pass

Audited by Gen Agent Trust Hub on Jul 10, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • Standard Development Tooling: The skill uses common command-line interfaces (gh, az, git, npm) to interact with the repository and project management boards. These are used as intended for viewing issues, querying work items, and managing branch state.
  • Local Documentation Access: The skill reads from local Markdown files (memory/ado-knowledge.md, MEMORY.md) to maintain context and follow established project rules, which is a standard practice for maintaining consistency across a codebase.
  • Automated Workflow Execution: The instructions guide the agent through a complete lifecycle (Sync -> Fetch -> Research -> Implement -> Test -> Commit). While it executes shell commands for building and testing (npm run build, npm test), these are restricted to the local development environment and are standard for verifying code changes.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 10, 2026, 02:58 PM
Security Audit — agent-trust-hub — workitem