azure-static-web-apps
Pass
Audited by Gen Agent Trust Hub on Mar 15, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the installation of the
@azure/static-web-apps-cliNode.js package. This is an official, well-known utility provided by Microsoft (a trusted vendor) for local development and deployment of Azure Static Web Apps.- [COMMAND_EXECUTION]: The skill includes numerous Azure CLI (az staticwebapp) and SWA CLI (swa) commands. These are legitimate administrative commands used for creating, configuring, and deploying static sites within the Azure ecosystem.- [CREDENTIALS_UNSAFE]: Security best practices are followed regarding sensitive data. API tokens, client secrets, and tenant IDs are represented by placeholders (e.g.,<token>,<tenant-id>) or referenced securely via GitHub Actions secrets (${{ secrets.AZURE_STATIC_WEB_APPS_API_TOKEN }}).- [SAFE]: Authentication examples demonstrate the correct retrieval of user identity information from the platform-providedx-ms-client-principalheader using standard base64 decoding as documented in the Azure Static Web Apps service guidelines.
Audit Metadata