git-integration-operations-cli
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [Command Execution]: The skill uses
fab(Fabric CLI) andaz(Azure CLI) to perform workspace operations. These tools are used for their intended purpose of managing cloud resources through the command line. - [External Dependency Management]: The templates recommend installing
ms-fabric-cliviapip. This is a tool provided by the platform vendor and is used to facilitate interaction with the Fabric API. - [Network Operations to Trusted Sources]: The skill communicates with
api.fabric.microsoft.comandapi.github.com. These interactions target the vendor's own infrastructure and a well-known service provider, respectively, which is standard for Git integration and CI/CD tasks. - [Credential Handling]: Automation scripts demonstrate how to pass service principal credentials using placeholders and suggest secure practices such as using
trapto delete temporary files containing secrets and setting strictumaskpermissions. Hardcoded secrets are not present; the skill correctly uses environment variables and placeholders for configuration. - [Data Handling]: The skill generates temporary JSON files to pass payloads to CLI tools. This is a common pattern in shell scripting to ensure complex data structures are correctly parsed by command-line interfaces.
Audit Metadata