skills/microsoft/skills/microsoft-azure-webjobs-extensions-authentication-events-dotnet/Gen Agent Trust Hub
microsoft-azure-webjobs-extensions-authentication-events-dotnet
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [Data Ingestion from External Systems]: The skill provides examples of fetching user data from external APIs to enrich authentication tokens. While this involves processing external data, the skill includes best practices for validating this data before use, which is a standard security practice for authentication extensions.
- [Processing of User-Provided Attributes]: The skill handles data submitted by users during sign-up flows. It demonstrates validation logic, such as blocking specific email domains and enforcing display name lengths, to manage the risks associated with untrusted user input effectively.
- [Official Package Installation]: The instructions include installing the
Microsoft.Azure.WebJobs.Extensions.AuthenticationEventspackage via NuGet. This is a legitimate development dependency provided by a recognized vendor for building Azure Functions extensions. - [Indirect Prompt Injection Surface]: Because the skill processes external data (API responses) and user input (form submissions) to influence authentication actions like adding claims or blocking sign-ins, it possesses an inherent ingestion surface. The skill mitigates this by providing examples of explicit validation and sanitization logic.
Audit Metadata