azure-devops

Pass

Audited by Gen Agent Trust Hub on Oct 24, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPRIVILEGE_ESCALATIONPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches the official Azure DevOps agent package from Microsoft's Azure CDN (vstsagentpackage.azureedge.net).
  • [REMOTE_CODE_EXECUTION]: Instructions guide the user to download, extract, and execute configuration scripts (config.sh and svc.sh) for the Azure DevOps agent.
  • [PRIVILEGE_ESCALATION]: Recommends the use of sudo to install and start the agent as a system service, which is a required step for its persistent operation.
  • [PERSISTENCE]: The skill provides commands to configure the Azure DevOps agent as a persistent system service using the built-in service manager.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing untrusted repository content, such as pipeline YAML files, which could theoretically contain malicious instructions.
  • Ingestion points: Git repository files and environment variables specified in the pipeline configuration.
  • Boundary markers: No explicit boundary markers or instruction-ignoring warnings are included in the templates.
  • Capability inventory: The skill utilizes shell script execution, cloud service deployment, and artifact management capabilities.
  • Sanitization: There are no instructions for sanitizing or validating the input repository content.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 24, 2026, 01:42 PM