microsoft
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- Local Infrastructure Interaction: The skill outlines how to run a local authentication emulator via standard Node package execution (
npx emulate). This behavior allows developers to simulate OAuth flows in offline or testing setups without transmitting sensitive credentials to live external production endpoints. - Mock Secrets Usage: The integration examples incorporate typical placeholders (
example-client-id,example-client-secret) and read operational configurations correctly from environment variables (e.g.,process.env.MICROSOFT_CLIENT_SECRET). This satisfies safe practices by demonstrating configuration logic without storing hardcoded secrets in version control. - Standard Network Operations: The referenced
curlexamples invoke network operations targetting standard local domains (http://localhost:4005) for OIDC discovery, validation, and tokens, avoiding external telemetry or exfiltration hazards.
Audit Metadata