teams-app-developer
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFE
Full Analysis
- Standard Developer Workflows: The skill utilizes official CLI tools such as
atk,az(Azure CLI), andaws(AWS CLI) to facilitate project scaffolding, cloud resource provisioning, and application deployment. These operations are consistent with the skill's stated purpose as a development toolkit.- Secure Secrets Management: Dedicated experts (e.g.,experts/security/secrets-ts.md) provide guidance on using environment variables, Azure Key Vault, and Managed Identity to avoid hardcoding credentials, aligning with industry security standards.- Input Validation Patterns: The skill includes detailed instructions on validating user inputs from messages and Adaptive Cards using schema validation libraries likezodto prevent injection and data corruption.- AI Implementation Guidance: Provides canonical patterns for integrating various AI model providers (OpenAI, Anthropic, Bedrock) using official SDKs and secure authentication methods.- Educational Code Samples: Contains various code snippets for building bot handlers and tools. A specific example usingeval()for a calculation tool includes an explicit warning to use a safe parser in production environments, demonstrating a focus on developer education and safety.
Audit Metadata