azure-ai-anomalydetector-java

Pass

Audited by Gen Agent Trust Hub on Nov 4, 2026

Risk Level: SAFE
Full Analysis
  • [CREDENTIALS_SAFE]: The skill correctly instructs users to use environment variables (AZURE_ANOMALY_DETECTOR_API_KEY) or DefaultAzureCredential rather than hardcoding secrets. It also explicitly warns against exposing Shared Access Signature (SAS) tokens.
  • [EXTERNAL_DOWNLOADS]: The skill references the official azure-ai-anomalydetector Java package from the com.azure group ID. This is a trusted dependency from Microsoft.
  • [REMOTE_CODE_EXECUTION]: No remote code execution patterns or arbitrary command executions were found. All network operations are directed towards official Microsoft Azure Cognitive Services endpoints.
  • [OBFUSCATION]: No obfuscated strings, hidden URLs, or suspicious encoding techniques were detected in the skill content.
  • [DATA_EXFILTRATION]: The skill's data handling involves sending time-series data to Azure services for analysis, which is the primary intended function. There are no signs of exfiltrating sensitive local files (like SSH keys or AWS credentials).
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 4, 2026, 09:42 PM