azure-identity-dotnet
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes instructions to install official .NET packages (
Azure.Identity,Microsoft.Extensions.Azure,Azure.Identity.Broker) from the legitimate NuGet package manager. - [CREDENTIALS_UNSAFE]: The documentation correctly uses placeholders like
<client-secret-value>and<directory-tenant-id>for authentication configuration, avoiding the inclusion of hardcoded secrets and encouraging the use of environment variables or managed identities. - [INDIRECT_PROMPT_INJECTION]: The skill describes authentication mechanisms that ingest external configuration data (environment variables, CLI credentials) to provide identity to the agent.
- Ingestion points: Environment variables (e.g.,
AZURE_CLIENT_SECRET) and local developer environments (Azure CLI, Visual Studio). - Boundary markers: The skill advises users to "constrain production credentials explicitly."
- Capability inventory: Provides capability to authenticate to Azure Storage and Key Vault services.
- Sanitization: Authentication logic is handled by the official Microsoft SDK.
- [SAFE]: All external resource links and source code references point to official, trusted domains including
microsoft.com,azure.net,nuget.org, andgithub.com/Azure.
Audit Metadata