skills/microsoft/apm/auth/Gen Agent Trust Hub

auth

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFE
Full Analysis
  • [Credential Management Best Practices]: The skill mandates the use of a centralized AuthResolver and discourages direct environment variable access (os.getenv()). This represents a secure pattern for handling sensitive authentication data by centralizing resolution logic.
  • [Azure CLI Integration]: The skill references the use of the Azure CLI (az account get-access-token) to resolve bearer tokens for Azure DevOps hosts. This is a standard administrative procedure for Microsoft environments and is used here to facilitate legitimate authentication flows.
  • [Sensitive Data Awareness]: The instructions identify various Personal Access Token (PAT) environment variables. These are used strictly for defining activation triggers and resolution order, ensuring the agent correctly handles authentication scenarios without exposing secret values or performing unauthorized exfiltration.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 09:54 PM