workiq
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFENO_CODE
Full Analysis
- Clear Capability Scoping: The instruction set acts as documentation and detailed parameter scoping for hosted MCP services (
https://workiq.svc.cloud.microsoft/mcp). It explicitly notes that no local runtimes, packages, or code are deployed with the skill itself, minimizing typical execution-level vectors. - Authentication Best Practices: The skill strictly delegates credential management to the host platform framework, forbidding the embedding of auth tokens inside configuration values, arguments, or prompt sequences.
- Data Handling Safety Constraints: Explicit boundaries prevent unsafe data fallback architectures by forcing error conditions to report natively through standard Graph API status flows rather than routing to localized unverified trackers.
Audit Metadata