Azure DevOps Admin

Pass

Audited by Gen Agent Trust Hub on May 13, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill documents the installation of the official 'azure-devops' extension for the Azure CLI. This is a well-known tool from a trusted technology provider (Microsoft).
  • [COMMAND_EXECUTION]: The documentation provides extensive recipes for using the az devops command-line tool and bash scripts to automate administrative tasks such as repository management, pipeline execution, and work item updates.
  • [DATA_EXFILTRATION]: Provides instructions on how to use the Azure DevOps REST API and OData endpoints to retrieve organizational data, including audit logs, identity descriptors, and security configuration. These operations are within the expected scope of an administrative skill.
  • [PROMPT_INJECTION]: Indirect Prompt Injection Risk Assessment:
  • Ingestion points: The skill is designed to read and process content from potentially untrusted sources such as pull request descriptions (references/devops-cli.md), work item discussions (references/devops-cli.md), and wiki pages (references/wiki-management.md).
  • Boundary markers: None identified in the provided instructions; the skill does not explicitly use delimiters to separate instructions from external data.
  • Capability inventory: The skill has the capability to execute shell commands via the Bash tool and modify project resources using the Write and Edit tools.
  • Sanitization: No specific sanitization or filtering logic is provided in the instructions for handling input from external project data.
Audit Metadata
Risk Level
SAFE
Analyzed
May 13, 2026, 03:34 AM
Security Audit — agent-trust-hub — Azure DevOps Admin