skills/mukul975/anthropic-cybersecurity-skills/building-identity-federation-with-saml-azure-ad/Gen Agent Trust Hub
building-identity-federation-with-saml-azure-ad
Pass
Audited by Gen Agent Trust Hub on Apr 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [SAFE]: The skill is designed for identity and access management tasks, providing documentation and tools for establishing SAML 2.0 federation. The implementation aligns with standard administrative practices for hybrid identity environments.
- [EXTERNAL_DOWNLOADS]: The skill fetches federation metadata and interacts with Microsoft Graph API using well-known official domains such as login.microsoftonline.com and graph.microsoft.com. These operations are essential for the skill's stated purpose and target trusted service providers.
- [COMMAND_EXECUTION]: The provided PowerShell scripts use standard cmdlets for AD FS and Azure AD management such as Install-AdfsFarm and New-MgDomainFederationConfiguration. These scripts are intended for authorized administrative use to configure security infrastructure.
- [DATA_EXFILTRATION]: Analysis of the Python scripts confirms that authentication tokens and configuration data are only transmitted to official Microsoft endpoints. There is no evidence of unauthorized data collection or exfiltration to third-party domains.
Audit Metadata