microsoft-agent365-devtools-cli
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The instructions guide the user to install the Microsoft Agent 365 DevTools CLI from the NuGet package registry, an official package management service.
- [COMMAND_EXECUTION]: The skill utilizes the a365 CLI to perform environment configuration, resource provisioning in Azure, and binary deployments to cloud services.
- [DYNAMIC_EXECUTION]: The develop start command enables local execution of an MCP server from a specified project directory as part of the standard developer testing workflow.
- [INDIRECT_PROMPT_INJECTION]: The skill contains logic to process external data sources which could theoretically harbor malicious instructions. * Ingestion points: Application manifests (agent-manifest.json) and project source code directories. * Boundary markers: Not explicitly identified in the command examples. * Capability inventory: Includes the ability to provision cloud resources and execute local server code. * Sanitization: Documentation focuses on functional usage and does not detail internal validation mechanisms.
Audit Metadata