The Agent Skills Directory

[SAFE]: The skill serves as a troubleshooting guide for Microsoft Entra ID (formerly Azure AD) and MSAL (Microsoft Authentication Library). It contains code snippets for C# (Backend) and TypeScript (Frontend) that implement standard authentication patterns, such as the PKCE flow and ChainedTokenCredential usage.
[DATA_EXPOSURE_AND_EXFILTRATION]: The instructions mention sensitive environment variables (e.g., Client IDs, Tenant IDs) and configuration files like .env and .env.local. However, no actual credentials or secrets are hardcoded; only placeholders are used. The guidance to store these in .env files is a recognized safe practice for local development.
[EXTERNAL_DOWNLOADS]: The skill references jwt.ms, which is a well-known and trusted utility provided by Microsoft for inspecting JSON Web Tokens. It also mentions official CLI tools like az (Azure CLI) and azd (Azure Developer CLI), which are standard for the described environment.
[COMMAND_EXECUTION]: While the skill mentions commands like azd up and az login, these are presented as instructions for the developer to run manually in their environment as part of the setup/troubleshooting process, rather than being executed automatically or unsafely by the agent.

troubleshooting-authentication