ms-teams-apps
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install and use the
@microsoft/teams.clipackage from the official npm registry. This is a legitimate development tool provided by Microsoft for Teams app lifecycle management. - [COMMAND_EXECUTION]: The documentation includes standard deployment and management commands using the Azure CLI (
az) and Teams Toolkit (teamsfx). These commands are intended for developers to provision and deploy their own application infrastructure and do not involve arbitrary or hidden execution. - [SAFE]: The skill is primarily educational, providing templates for manifest files, Docker configurations, and TypeScript/Python code. It correctly identifies the need for secret management, using placeholders (e.g.,
AZURE_OPENAI_API_KEY) and.envfile references rather than hardcoding sensitive credentials. No indicators of prompt injection, data exfiltration, or persistence mechanisms were detected in the provided documentation and code snippets.
Audit Metadata