azure-openai-to-responses

Pass

Audited by Gen Agent Trust Hub on Jul 30, 2026

Risk Level: SAFE
Full Analysis
  • Local Script Execution: The skill includes detect_legacy.py, a utility script designed to scan local files for deprecated API patterns. This script uses standard file system access and regular expressions to identify migration targets, which is an expected behavior for a developer productivity tool.
  • Environment Variable Usage: The instructions guide users on how to configure their environment using standard variables such as AZURE_OPENAI_API_KEY and AZURE_OPENAI_ENDPOINT. It also correctly advises renaming certain variables to follow standard Azure Identity conventions (e.g., AZURE_CLIENT_ID), which promotes consistent security practices.
  • Trusted External References: The skill references documentation and resources from established domains (e.g., microsoft.com, azure.com) and well-known package registries (npmjs.com, jsdelivr.net). These references are used for standard purposes such as viewing documentation or linking to official frontend libraries.
  • Software Dependency Management: The skill specifies requirements for well-known libraries like openai and azure-identity. The version constraints provided ensure compatibility with the latest API features and security updates.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 30, 2026, 09:49 AM
Security Audit — agent-trust-hub — azure-openai-to-responses