maui-authentication
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation includes commands for downloading auxiliary setup scripts from Microsoft's shortlink service (aka.ms). These resources are used to automate the registration of applications in Microsoft Entra ID and to configure authentication for backend APIs.
- [INDIRECT_PROMPT_INJECTION]: The skill provides specific prompt templates intended for the user to provide to the AI agent to trigger subsequent workflows (e.g., "Provision Entra ID app registrations for my MAUI app"). This creates a multi-step interaction surface where the skill content directs future agent behavior.
- Ingestion points: Natural language instruction templates in
references/authentication-api.md. - Boundary markers: Absent. The skill provides direct text snippets for user-to-agent interaction.
- Capability inventory: The skill documents the setup of authentication providers and provides the necessary scripts to enable the agent to perform cloud configuration tasks.
- Sanitization: None. The skill provides static documentation and relies on the platform's underlying safety filters for the subsequent prompts.
Audit Metadata