microsoft
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFE
Full Analysis
- Local Development Emulation: The skill facilitates local testing of Microsoft authentication flows by redirecting OAuth/OIDC requests to a local service (
http://localhost:4005). This is a standard and safe development practice for mocking external APIs. - Package Execution via npx: The skill uses
npx emulateto run an emulator tool. The use of npx for local development tools is routine, and the tool's usage is consistent with the skill's stated purpose. - Secure Configuration Patterns: Code examples demonstrate the use of environment variables (
process.env.MICROSOFT_CLIENT_SECRET) to manage credentials rather than hardcoding them, which follows security best practices for secret management. - Controlled Network Interactions: Network operations via
curlare directed toward the local emulator instance. This allows for isolated testing without interacting with live Microsoft production services. - Scaffolded Development: The skill mentions a custom emulator scaffold command (
npx emulate init --custom), which is a feature intended to help developers build and test their own API mocks locally.
Audit Metadata