build-health
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- Standard Command Execution: The skill uses
az pipelinesandnodeto interact with build systems and process data. These commands are typical for continuous integration monitoring and require local authentication viaaz login. - Network Operations to Known Services: The
fetch-builds.shscript communicates withdev.azure.comand GitHub repositories owned by Microsoft. These are well-known services used for hosting the VS Code source code and build pipelines. - Report Generation in Temporary Directories: The skill defaults to writing build health reports to
/tmp/build-health. This is a common practice for storing non-persistent diagnostic artifacts. - Automated Data Fetching: The skill automates the retrieval of build logs and timelines. While this involves downloading external content, it is limited to build artifacts from the authorized Azure DevOps organization.
Audit Metadata