skills/mukul975/anthropic-cybersecurity-skills/auditing-azure-active-directory-configuration/Gen Agent Trust Hub
auditing-azure-active-directory-configuration
Pass
Audited by Gen Agent Trust Hub on Apr 10, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a series of PowerShell, Azure CLI, and Python commands to query identity configuration and role assignments. These operations are essential for the stated auditing purpose and use legitimate management interfaces.- [EXTERNAL_DOWNLOADS]: The workflow involves installing standard security and management tools, including the Microsoft.Graph PowerShell module and ScoutSuite. These are well-established, reputable tools within the cybersecurity community.- [DATA_EXFILTRATION]: The skill interacts with the Microsoft Graph API to retrieve sensitive tenant data. All retrieved data is either displayed in the console or saved to a local report file (azure_ad_audit.json). No unauthorized data transmission to external domains was observed.- [SAFE]: The Python agent script uses the standard Azure Identity SDK for authentication, supporting secure practices like environment-variable based credentials and avoiding hardcoded secrets.
Audit Metadata