git-integration-operations-cli

Pass

Audited by Gen Agent Trust Hub on Aug 9, 2026

Risk Level: SAFECREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • Credential Management (Temporary Files): The skill provides a recipe for creating Git connections that involves writing service principal secrets to a temporary connection.json file. To address the risks of disk persistence, the documentation provides specific mitigations, including the use of umask 077 to restrict file access to the current user and a shell trap to ensure the file is automatically deleted when the script finishes.
  • Remote Resource Verification: The skill implements a version check mechanism that fetches and reads package.json from its source repository. This is a standard procedure to ensure that the automation remains compatible with current Microsoft Fabric API requirements.
  • Controlled CLI Dependencies: The skill utilizes the ms-fabric-cli Python package and recommends pinning to version 1.6.1. This practice ensures stable execution and consistent parsing of JSON outputs, which is beneficial for reliable automation.
  • Input Sanitization: The skill handles dynamic data such as workspace names and commit messages. It provides guidance on using jq to build JSON bodies, which ensures that special characters in item names do not interfere with the structure of the API requests.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 9, 2026, 08:57 AM
Security Audit — agent-trust-hub — git-integration-operations-cli