Scanned skills

microsoft/azure-skills entra-agent-id

Checked the catalogued skill at entra-agent-id.

SkillTrust corpus scan 22 September 2026 v0.10.0 via skillsh Verify on GitHub
D AI-triaged 7
D Security

D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →

A Permissions

A set by no findings on this axis

A Transparency

A set by no findings on this axis

7 findings
securitymedium SD-008
SKILL.md
securityhigh SD-007
references/sdk-sidecar-deployment.md
securityhigh SD-007
references/sdk-sidecar-deployment.md
securityhigh SD-007
references/sdk-sidecar-deployment.md
securityhigh SD-007
references/sdk-sidecar-deployment.md
securityhigh SD-007
references/sdk-sidecar-deployment.md
securityhigh SD-007
references/sdk-sidecar-deployment.md
22 suppressed by AI triage
securityhigh SD-007 benign_example
SKILL.md

The requests POST is a legitimate API call for creating an agent blueprint in Microsoft Graph.

securityhigh SD-007 benign_example
SKILL.md

This POST request creates a BlueprintPrincipal, a standard provisioning step in Microsoft Graph usage.

securityhigh SD-007 benign_example
SKILL.md

The POST call creates an agent instance, a normal operation for managing Azure AD entities.

securityhigh SD-007 benign_example
SKILL.md

The GET request retrieves service principals for permission assignment, a routine Graph API interaction.

securityhigh SD-007 benign_example
SKILL.md

This POST assigns app roles to a service principal, a standard Microsoft Graph operation.

securityhigh SD-007 benign_example
SKILL.md

The POST to oauth2PermissionGrants sets delegated permissions, a normal Graph API usage.

securityhigh SD-007 benign_example
references/oauth2-token-flow.md

Illustrates an outbound HTTP call in documentation, not executed code.

securityhigh SD-007 benign_example
references/oauth2-token-flow.md

Shows an outbound POST request example; not runtime execution.

securitymedium SD-008 benign_example
references/oauth2-token-flow.md

No actual base64 string present; scanner false positive.

permission_hygienehigh SD-003 benign_example
references/oauth2-token-flow.md

Path shown is a literal API endpoint, not a traversal.

securitymedium SD-008 benign_example
references/oauth2-token-flow.md

No base64 content; scanner misidentified documentation text.

securityhigh SD-007 benign_example
references/oauth2-token-flow.md

Outbound call shown only as a code example; not executed.

securityhigh SD-007 benign_example
references/obo-blueprint-setup.md

Documentation code example for legitimate Microsoft Graph API usage

securityhigh SD-007 benign_example
references/obo-blueprint-setup.md

Documentation code example for legitimate permission grant usage

securityhigh SD-007 benign_example
references/runtime-token-exchange.md

Demonstrates a standard, documented use of urllib to obtain an OAuth token, not malicious.

securityhigh SD-007 benign_example
references/runtime-token-exchange.md

Illustrates a legitimate token request via urllib, part of normal operation.

securityhigh SD-007 benign_example
references/runtime-token-exchange.md

Shows typical use of urllib to fetch a token; not a threat.

securityhigh SD-007 benign_example
references/runtime-token-exchange.md

Example code for acquiring a Graph token; benign.

securityhigh SD-007 benign_example
references/runtime-token-exchange.md

Part of documented token exchange flow, not malicious.

securityhigh SD-007 benign_example
references/runtime-token-exchange.md

Shows standard on-behalf-of token request, benign.

securityhigh SD-007 benign_example
references/runtime-token-exchange.md

Example of delegated token retrieval; benign.

securitymedium SD-008 benign_example
references/sdk-sidecar.md

The base64 string is an example JWT in documentation, not malicious code.