azure-identity-java
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [Credential Management]: The skill utilizes industry-standard placeholders (e.g.,
<client-secret>,{YOUR_VAULT_NAME},P@s$w0rd) in its code examples to illustrate where configuration is required without exposing actual secrets. It explicitly recommends best practices such as using Managed Identities in production and environment variables in CI/CD pipelines to avoid hardcoding sensitive information. - [Trusted Dependencies]: The skill references official Java libraries (e.g.,
com.azure:azure-identity) and the Azure SDK BOM from official, well-known package registries. These are standard, versioned components provided by the technology vendor. - [Official Service Integration]: All network endpoints and documentation links (e.g.,
aka.ms,login.microsoftonline.com,vault.azure.net) target official domains associated with the primary cloud services described in the skill. The instructions and code snippets align with established authentication patterns for these services.
Audit Metadata