azure-openai-to-responses
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFE
Full Analysis
- [Secret Management]: The skill correctly instructs developers to use environment variables (e.g.,
os.environ["AZURE_OPENAI_API_KEY"]) rather than hardcoding credentials, which is a standard security best practice.\n- [Trusted Infrastructure]: The migration guidance and external documentation references target official Microsoft Azure and OpenAI domains. These are well-known, established services for the intended task.\n- [Secure Authentication]: It specifically recommends the use ofDefaultAzureCredentialfrom theazure-identitylibrary for Entra ID (formerly Azure AD) authentication, which provides a more secure, token-based alternative to static API keys.\n- [Standard Tooling]: The skill suggests using standard local search tools likeripgrep(rg) to identify legacy code patterns, which is a routine and safe practice for codebase migrations.
Audit Metadata