microsoft-development

Pass

Audited by Gen Agent Trust Hub on Apr 21, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill documentation describes installing the Microsoft Learn Docs MCP server using npx -y @microsoft/learn-docs-mcp, which targets an official package from a well-known service provider. It also references numerous official SDK packages for Python and Node.js.
  • [COMMAND_EXECUTION]: The skill includes a PowerShell script scripts/azure-health-check.ps1 that executes various Azure CLI (az) commands to inspect resource health in a specified resource group. This script is intended for diagnostic purposes and relies on the user's existing Azure login session.
  • [DATA_EXPOSURE]: The example file examples/azure-function-api-example.md contains a configuration snippet for local development (local.settings.json) that includes a Cosmos DB account key. This key is the publicly documented static master key for the Azure Cosmos DB Emulator and does not represent a leak of production credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 21, 2026, 03:45 AM
Security Audit — agent-trust-hub — microsoft-development