The Agent Skills Directory

[SAFE]: The skill implements secure credential management by utilizing the AZURE_DEVOPS_TOKEN environment variable rather than hardcoding secrets. It explicitly warns against saving tokens in local git configurations.
[SAFE]: All network operations (via curl, git, and Invoke-RestMethod) are directed to the official Azure DevOps domain (dev.azure.com), which is a well-known and trusted service.
[SAFE]: The use of Base64 encoding is limited to a legitimate technical requirement for generating HTTP Basic Authentication headers required by the Azure DevOps API.
[SAFE]: Instructions for git operations include safety measures, such as disabling interactive prompts (GIT_TERMINAL_PROMPT=0) and guidelines to avoid pushing directly to protected branches like main or master.

azure-devops