pipeline-migration

Pass

Audited by Gen Agent Trust Hub on Aug 9, 2026

Risk Level: SAFE
Full Analysis
  • [Secure Data Handling]: The skill interacts with sensitive identifiers such as Subscription IDs and Access Tokens. All network operations target official Microsoft domains (e.g., api.fabric.microsoft.com, management.azure.com), and the skill explicitly provides instructions on using secure practices like secureInput and secureOutput to prevent secret exposure in run histories.
  • [Functional Script Execution]: The included scripts utilize the az CLI and Python requests library to perform the migration. These operations are directly related to the skill's stated purpose and are performed within the agent's execution environment using standard authentication tokens.
  • [Transparency and Best Practices]: The documentation includes a 'Pipeline Migration Gotchas' section that warns against common security pitfalls, such as hardcoding secrets or storing tokens in Variable Libraries, which are not designed as secret stores. This proactive guidance aligns with enterprise security standards.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 9, 2026, 08:57 AM
Security Audit — agent-trust-hub — pipeline-migration