microsoft-365-agents-toolkit
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- Verified Resource Acquisition: The toolkit directs users to obtain CLI utilities and dependencies from official vendor repositories and public registries. Evidence of these downloads is found in the installation instructions for the Agents Toolkit CLI and Playground tools. These sources are recognized as safe for the intended development activities.
- Project Lifecycle Commands: The skill utilizes a dedicated CLI tool to automate resource provisioning and code deployment. Evidence includes commands like 'atk provision' and 'atk deploy' described in the lifecycle documentation. These commands are scoped to the development and management of the user's own agent projects.
- Development Environment Setup: Instructions for local testing include using network tunnels and starting background services. Evidence is present in the testing guides, which recommend using 'devtunnel' and 'npm run dev'. These are standard procedures for validating bot functionality in a real-world context.
Audit Metadata