entra-agent-id
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Identity Management and Credentials: The skill manages Microsoft Entra identities and involves handling sensitive information like client secrets and tenant IDs. It provides best-practice guidance for local development and recommends transitioning to more secure methods like Workload Identity Federation for production deployments.
- Command Execution: To facilitate identity setup, the skill incorporates the use of the Azure CLI (
az) for obtaining user context. This is a standard and legitimate pattern for administrative and provisioning tasks. - Network Operations: The instructions involve communicating with official Microsoft Graph and authentication endpoints. These operations are essential for the skill's intended purpose of managing identity resources.
- Input Surface Considerations: The process of creating agent identities involves handling user-defined properties such as display names. While this is expected functionality, ensuring these inputs are validated when integrated into automated workflows is a standard security consideration for resource provisioning.
Audit Metadata