Azure DevOps Repos
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing the Git Credential Manager for Linux using a script from a well-known Microsoft domain (https://aka.ms/gcm/linux-install-source.sh) which is piped directly to a shell.
- [COMMAND_EXECUTION]: The reference material contains numerous Bash and TypeScript snippets for executing operations such as generating SSH keys (ssh-keygen), configuring Git credentials, and utilizing the Azure CLI (az account get-access-token) to fetch authentication tokens.
- [DATA_EXFILTRATION]: The skill guides mention accessing and managing sensitive files, including SSH private and public keys (
/.ssh/id_ed25519_ado) and Git credential stores (/.git-credentials) during the configuration of authentication methods. - [PROMPT_INJECTION]: The skill documents how to ingest data from Azure DevOps pull requests, which could contain untrusted user content in fields like titles and descriptions.
- Ingestion points: references/repos-prs.md (Pull Request REST API responses).
- Boundary markers: None specified in the documentation.
- Capability inventory: The skill allows use of the Bash tool and detailed Git/API operations.
- Sanitization: No sanitization or validation of the PR content is mentioned before processing.
Audit Metadata