copilot-sdk
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill contains comprehensive documentation and instructional content for a developer SDK. It does not include or execute any malicious scripts or commands.- [EXTERNAL_DOWNLOADS]: The skill references official packages and repositories for the GitHub Copilot SDK and the Model Context Protocol (MCP), such as @github/copilot-sdk and @modelcontextprotocol/server-filesystem. These resources originate from well-known technology organizations and are documented here as standard dependencies for legitimate development workflows.- [CREDENTIALS_UNSAFE]: The documentation mentions standard environment variables for authentication (e.g., COPILOT_GITHUB_TOKEN, AZURE_OPENAI_KEY) and provides guidance on using .env files and secret redaction hooks. These are presented as security best practices and do not involve the exposure of actual secrets or hardcoded credentials.
Audit Metadata