azure-identity-java
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard documentation and code snippets for the official
com.azure:azure-identitylibrary. All code examples use placeholders like<client-id>or<client-secret>rather than exposing real credentials. - [DATA_EXPOSURE_&_EXFILTRATION]: While the skill mentions environment variables and secrets, it specifically promotes safe management practices, such as using
.envfiles and Azure Managed Identities, which are industry standards for avoiding secret exposure. - [UNVERIFIABLE_DEPENDENCIES_&_REMOTE_CODE_EXECUTION]: The skill references a well-known, trusted Maven dependency (
com.azure:azure-identity) from a recognized vendor. No unverified packages or remote execution scripts are present. - [PROMPT_INJECTION]: No prompt injection patterns, bypass instructions, or attempts to override agent behavior were detected in the instructions or metadata.
- [DYNAMIC_EXECUTION]: The Java snippets are static examples for educational purposes. There is no dynamic generation of code from untrusted inputs or use of unsafe deserialization methods.
Audit Metadata