skills/vercel-labs/emulate/microsoft/Gen Agent Trust Hub

microsoft

Pass

Audited by Gen Agent Trust Hub on Oct 5, 2026

Risk Level: SAFE
Full Analysis
  • Local Development Emulation: The skill facilitates local testing of Microsoft authentication flows by redirecting OAuth/OIDC requests to a local service (http://localhost:4005). This is a standard and safe development practice for mocking external APIs.
  • Package Execution via npx: The skill uses npx emulate to run an emulator tool. The use of npx for local development tools is routine, and the tool's usage is consistent with the skill's stated purpose.
  • Secure Configuration Patterns: Code examples demonstrate the use of environment variables (process.env.MICROSOFT_CLIENT_SECRET) to manage credentials rather than hardcoding them, which follows security best practices for secret management.
  • Controlled Network Interactions: Network operations via curl are directed toward the local emulator instance. This allows for isolated testing without interacting with live Microsoft production services.
  • Scaffolded Development: The skill mentions a custom emulator scaffold command (npx emulate init --custom), which is a feature intended to help developers build and test their own API mocks locally.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 5, 2026, 06:33 AM