setup-app-insights
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- Credential Management: The skill explicitly instructs not to print, log, or persist Azure Application Insights connection strings in memory-bank.md or chat history. It uses
AskUserQuestionfor input and stores the value directly in the application configuration file, following the principle of least exposure. - Least Privilege: The skill requests permission to read and write project files necessary for configuration (
app.json,app/_layout.tsx) and uses specific Azure CLI commands (az resource list,az resource show) to discover resources rather than requesting broad administrative access. - Safe Telemetry: The skill provides clear guidance on data privacy, explicitly forbidding the inclusion of personal identifiers (PII), tokens, or free text in custom telemetry events.
- External Dependencies: The skill references official Microsoft packages (
@microsoft/applicationinsights-web,@microsoft/power-apps-native-host) which are consistent with the skill's stated vendor (Microsoft) and intended purpose. - User Consent: The skill operates on an explicit opt-in basis, requiring user confirmation before performing mutations or enabling telemetry services.
Audit Metadata