[Rmaram07]

Motivation and Context

Description

Contribution Checklist

• The code builds clean without any errors or warnings
• The PR follows the SK Contribution Guidelines and the pre-submission formatting script raises no violations
• All unit tests pass, and I have added new tests where possible
• I didn't break anyone 😄

[Rmaram07]

Julio Carlos Menendez (@juliomenendez) Atif Aziz (@atifaziz) Dan Dascalescu (@dandv) Matt Kotsenas (@MattKotsenas) , can you approve this pull request and do a release ASAP? we are blocked from using download_file method from semantic kernel.

[Rmaram07]

Mark Wallace, can you help me with this?

[Copilot]

Copilot review overview

🟡 Changes recommended

Add a regression test covering kernel discovery of download_file.

Review effort: Lite
Findings: 1

Open (1)

• Add regression test for discoverable download_file registration · New

What changed in this PR

Adds kernel-function metadata to make download_file discoverable and resolve lookup failures.

Changes:

• Registers download_file with @kernel_function.
• Provides its public name and description.

File	Description
python/​semantic_kernel/​core_plugins/​sessions_python_tool/​sessions_python_plugin.py	Exposes download_file to kernel plugin discovery.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[Eduard van Valkenburg (eavanvalkenburg)]

Review finding (blocking): Do not expose unrestricted local file writes as a kernel function

Adding @kernel_function makes download_file model-callable, including its local_file_path argument. _validate_local_path_for_download currently allows every destination when allowed_download_directories is None, which is the default, so an auto-invoked tool call can overwrite any local file writable by the process. Please make local downloads deny-by-default when a path is supplied, or expose only a safe buffer-returning function.