entra-token-verification
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill acts as a security specification and implementation guide for developers and AI agents.
- [SAFE]: Local file paths (e.g.,
~/code/...) are used as reference points (anchors) to guide the agent to relevant codebases for implementation context. - [SAFE]: The instructions focus on hardening authentication logic, including v2 issuer checks, audience verification, and preventing identifier collisions like the Kelvin sign homograph attack.
- [SAFE]: Shell commands mentioned (e.g.,
az ad app show) are presented as manual verification steps for auditing application configurations.
Audit Metadata