azure-hosted-copilot-sdk
Pass
Audited by Gen Agent Trust Hub on Mar 27, 2026
Risk Level: SAFE
Full Analysis
- Authentication Best Practices: The skill provides clear guidance on using
ManagedIdentityCredentialfor production environments to ensure passwordless authentication, reservingDefaultAzureCredentialspecifically for local development to avoid unpredictable credential fallback chains. - Secure Scaffolding: Project initialization is performed using the Azure Developer CLI (
azd) with official templates from theazure-samplesorganization, ensuring a consistent and secure baseline for new applications. - Credential Management: It incorporates patterns for managing sensitive data using Azure Key Vault and the GitHub CLI (
gh), minimizing the exposure of access tokens in environment variables or source code. - Official Resource Integration: The skill references established libraries from the
@azureand@githubnamespaces and provides documentation links to official repositories, ensuring that developers are using vetted and supported tools.
Audit Metadata