azure-static-web-apps

Pass

Audited by Gen Agent Trust Hub on Mar 15, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references the installation of the @azure/static-web-apps-cli Node.js package. This is an official, well-known utility provided by Microsoft (a trusted vendor) for local development and deployment of Azure Static Web Apps.- [COMMAND_EXECUTION]: The skill includes numerous Azure CLI (az staticwebapp) and SWA CLI (swa) commands. These are legitimate administrative commands used for creating, configuring, and deploying static sites within the Azure ecosystem.- [CREDENTIALS_UNSAFE]: Security best practices are followed regarding sensitive data. API tokens, client secrets, and tenant IDs are represented by placeholders (e.g., <token>, <tenant-id>) or referenced securely via GitHub Actions secrets (${{ secrets.AZURE_STATIC_WEB_APPS_API_TOKEN }}).- [SAFE]: Authentication examples demonstrate the correct retrieval of user identity information from the platform-provided x-ms-client-principal header using standard base64 decoding as documented in the Azure Static Web Apps service guidelines.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 15, 2026, 11:08 AM