azure-auth
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides templates for standard authentication flows using Microsoft's official MSAL libraries.
- [SAFE]: The implementation of JWT validation in
templates/workers-jwt-validation.tsfollows security best practices by using thejoselibrary, properly discovering the JWKS endpoint via OpenID configuration, and verifying both issuer and audience claims. - [SAFE]: All network operations (e.g., fetching from
login.microsoftonline.com) target well-known, trusted Microsoft infrastructure essential for the skill's stated purpose. - [SAFE]: The skill correctly advises against insecure practices, such as hardcoding credentials, and instead promotes using environment variables (
import.meta.env) and.envfiles.
Audit Metadata