The Agent Skills Directory

[COMMAND_EXECUTION]: The azure-pipeline.ts script executes various system commands including git, az (Azure CLI), and platform-specific utilities like which or where. It uses child_process.spawn with shell: false for core operations involving user-supplied parameters to mitigate shell injection risks.
[COMMAND_EXECUTION]: The tool implements strict validation for user inputs, including build IDs, branch names, and pipeline parameters, using length constraints and regular expression patterns.
[COMMAND_EXECUTION]: Protection against path traversal is included when specifying artifact names for download, ensuring that requested filenames do not contain unsafe path components like parent directory markers.
[EXTERNAL_DOWNLOADS]: The script facilitates the download of build logs and artifacts directly from the Azure DevOps REST API to the local temporary directory.
[REMOTE_CODE_EXECUTION]: The installation instructions in SKILL.md include a command to fetch a setup script from a Microsoft-owned domain (aka.ms) and execute it via a shell pipe.

azure-pipelines