Azure DevOps Pipelines
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill package consists entirely of documentation and example scripts for legitimate Azure DevOps management tasks. It contains no executable scripts or malicious logic.
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for downloading official Azure DevOps agent packages from Microsoft's distribution network (vstsagentpackage.azureedge.net). These are standard components for self-hosted agent configuration.
- [COMMAND_EXECUTION]: Provides example shell and PowerShell commands for configuring build agents and performing deployments. All commands are standard for the described tasks and align with official documentation.
- [DATA_EXFILTRATION]: While the skill demonstrates automation via the Azure DevOps REST API, all communication is directed to legitimate services (dev.azure.com and vsrm.dev.azure.com).
- [CREDENTIALS_UNSAFE]: The skill correctly emphasizes secure authentication methods, advising against hardcoded secrets and recommending the use of managed identities, Key Vault-linked variable groups, and WIF.
Audit Metadata