entra-agent-id
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [Command Execution]: The skill uses Python's
subprocessto run Azure CLI commands likeaz ad signed-in-user show. While executing shell commands can be a security consideration, here it is used to retrieve the user's ID to correctly assign ownership to newly created identities.- [External Dependency Management]: The skill recommends installing packages likeazure-identityandrequestsvia standard package managers. Although installing external code requires trust in the source, these are official and widely used libraries for interacting with Azure services.- [Identity and Permission Provisioning]: The skill provides code to automate the creation of Entra ID applications and the assignment of permissions. While these are high-privilege operations, they are the primary purpose of the skill and are performed against official Microsoft Graph API endpoints.- [Container Deployment]: The documentation includes manifests for deploying a sidecar container from Microsoft's official container registry. This involves running external container images, but the skill includes appropriate security guidance to restrict the sidecar's network exposure to the local host.
Audit Metadata