git-integration-operations-cli
Pass
Audited by Gen Agent Trust Hub on Aug 9, 2026
Risk Level: SAFECREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- Credential Management (Temporary Files): The skill provides a recipe for creating Git connections that involves writing service principal secrets to a temporary
connection.jsonfile. To address the risks of disk persistence, the documentation provides specific mitigations, including the use ofumask 077to restrict file access to the current user and a shelltrapto ensure the file is automatically deleted when the script finishes. - Remote Resource Verification: The skill implements a version check mechanism that fetches and reads
package.jsonfrom its source repository. This is a standard procedure to ensure that the automation remains compatible with current Microsoft Fabric API requirements. - Controlled CLI Dependencies: The skill utilizes the
ms-fabric-cliPython package and recommends pinning to version 1.6.1. This practice ensures stable execution and consistent parsing of JSON outputs, which is beneficial for reliable automation. - Input Sanitization: The skill handles dynamic data such as workspace names and commit messages. It provides guidance on using
jqto build JSON bodies, which ensures that special characters in item names do not interfere with the structure of the API requests.
Audit Metadata