azure-ai-anomalydetector-java
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFE
Full Analysis
- [CREDENTIALS_SAFE]: The skill correctly instructs users to use environment variables (
AZURE_ANOMALY_DETECTOR_API_KEY) orDefaultAzureCredentialrather than hardcoding secrets. It also explicitly warns against exposing Shared Access Signature (SAS) tokens. - [EXTERNAL_DOWNLOADS]: The skill references the official
azure-ai-anomalydetectorJava package from thecom.azuregroup ID. This is a trusted dependency from Microsoft. - [REMOTE_CODE_EXECUTION]: No remote code execution patterns or arbitrary command executions were found. All network operations are directed towards official Microsoft Azure Cognitive Services endpoints.
- [OBFUSCATION]: No obfuscated strings, hidden URLs, or suspicious encoding techniques were detected in the skill content.
- [DATA_EXFILTRATION]: The skill's data handling involves sending time-series data to Azure services for analysis, which is the primary intended function. There are no signs of exfiltrating sensitive local files (like SSH keys or AWS credentials).
Audit Metadata