skill-creator
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- Strong Authentication Defaults: The skill mandates the use of
DefaultAzureCredentialand context managers for client lifecycle management across all supported languages (Python, .NET, Java, TS, Go, Rust). By discouraging the use of connection strings and API keys, it significantly reduces the risk of accidental credential exposure in the skills generated using this guide. - Secure Utility Implementation: The accompanying Python scripts (init_skill.py, package_skill.py, quick_validate.py) provide essential automation for skill developers. Notably, quick_validate.py uses the
yaml.safe_load()method, which is a critical security measure to prevent arbitrary code execution when parsing untrusted YAML frontmatter. - Verification against Authoritative Sources: The skill instructs agents to use the microsoft-docs tool to verify API patterns directly from official documentation. This workflow encourages the use of verified, up-to-date code patterns and helps mitigate risks from potentially poisoned or outdated external references.
Audit Metadata