msgraph-sdk
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill directs users to official Microsoft Graph documentation and SDK repositories under the trusted 'microsoftgraph' organization on GitHub.
- [SAFE]: Security best practices for credential management are explicitly emphasized, including a prohibition on hardcoding secrets and recommendations for using Managed Identities, Azure Key Vault, or environment variables.
- [SAFE]: The workflow incorporates the principle of least privilege, instructing developers to use the minimum required permission scopes based on Microsoft's official reference documentation.
- [EXTERNAL_DOWNLOADS]: The skill provides standard instructions for installing official Microsoft packages via common package managers (pip, npm, NuGet) from trusted, well-known registries.
- [SAFE]: Implementation patterns for authentication correctly distinguish between client-only, user-delegated, and application-only flows, preventing common authorization misconfigurations.
Audit Metadata