Azure DevOps Admin
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documents the installation of the official 'azure-devops' extension for the Azure CLI. This is a well-known tool from a trusted technology provider (Microsoft).
- [COMMAND_EXECUTION]: The documentation provides extensive recipes for using the
az devopscommand-line tool andbashscripts to automate administrative tasks such as repository management, pipeline execution, and work item updates. - [DATA_EXFILTRATION]: Provides instructions on how to use the Azure DevOps REST API and OData endpoints to retrieve organizational data, including audit logs, identity descriptors, and security configuration. These operations are within the expected scope of an administrative skill.
- [PROMPT_INJECTION]: Indirect Prompt Injection Risk Assessment:
- Ingestion points: The skill is designed to read and process content from potentially untrusted sources such as pull request descriptions (
references/devops-cli.md), work item discussions (references/devops-cli.md), and wiki pages (references/wiki-management.md). - Boundary markers: None identified in the provided instructions; the skill does not explicitly use delimiters to separate instructions from external data.
- Capability inventory: The skill has the capability to execute shell commands via the
Bashtool and modify project resources using theWriteandEdittools. - Sanitization: No specific sanitization or filtering logic is provided in the instructions for handling input from external project data.
Audit Metadata