git-integration-operations-cli

Pass

Audited by Gen Agent Trust Hub on Sep 11, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [Command Execution]: The skill uses fab (Fabric CLI) and az (Azure CLI) to perform workspace operations. These tools are used for their intended purpose of managing cloud resources through the command line.
  • [External Dependency Management]: The templates recommend installing ms-fabric-cli via pip. This is a tool provided by the platform vendor and is used to facilitate interaction with the Fabric API.
  • [Network Operations to Trusted Sources]: The skill communicates with api.fabric.microsoft.com and api.github.com. These interactions target the vendor's own infrastructure and a well-known service provider, respectively, which is standard for Git integration and CI/CD tasks.
  • [Credential Handling]: Automation scripts demonstrate how to pass service principal credentials using placeholders and suggest secure practices such as using trap to delete temporary files containing secrets and setting strict umask permissions. Hardcoded secrets are not present; the skill correctly uses environment variables and placeholders for configuration.
  • [Data Handling]: The skill generates temporary JSON files to pass payloads to CLI tools. This is a common pattern in shell scripting to ensure complex data structures are correctly parsed by command-line interfaces.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 11, 2026, 01:43 PM
Security Audit — agent-trust-hub — git-integration-operations-cli