bf-to-agents-sdk-typescript-migration
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [Tool and SDK Mapping]: The skill uses a migration map to translate Bot Framework SDK symbols to Microsoft 365 Agents SDK equivalents. All target packages (e.g.,
@microsoft/agents-hosting,@microsoft/agents-activity) are official Microsoft vendor resources, which is consistent with the skill's stated purpose and the author (microsoft). - [Command Execution]: The workflow involves running build, lint, and test commands (
step 6). This is a standard part of a software migration and development process to ensure the stability of the migrated code. - [Data Handling and Secrets]: The skill includes an explicit rule to 'Keep production authentication enabled and never expose secrets,' which aligns with security best practices for handling configuration files like
.envduring migration. - [External References]: The skill references official Microsoft documentation and GitHub repositories (
learn.microsoft.com,github.com/microsoft/*). These are trusted vendor sources and do not introduce external risks.
Audit Metadata