azure-communication-common-java

Pass

Audited by Gen Agent Trust Hub on Nov 4, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references the azure-communication-common library from the com.azure group. This is the official Microsoft Azure organization, which is a well-known and trusted source.
  • [CREDENTIALS_UNSAFE]: The documentation uses standard placeholders (e.g., <user-access-token>, <your-client-id>) for sensitive information and correctly advises users to use environment variables or secure backend services for token management.
  • [INDIRECT_PROMPT_INJECTION]: While the skill involves parsing string-based identifiers that could originate from external sources, the implementation uses static type checking and prefix matching, which does not present a significant security risk in this context.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 4, 2026, 09:42 PM