skillhash

Is entra-app-registration safe?

Grade A, 100/100. No meaningful risk found.

Guides Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration. USE FOR: create app registration, register Azure AD app, configure OAuth, set up authentication, add API permissions, generate service principal, MSAL example, console app auth, Entra ID setup, Azure AD authentication. DO NOT USE FOR: Key Vault secrets (use azure-keyvault-expiration-audit), general Azure resource security guidance.

microsoft/azure-skills/.github/plugins/azure-skills/skills/entra-app-registration 1.6kChecked 3h agoContent last changed 3h ago
A

entra-app-registration

.github/plugins/azure-skills/skills/entra-app-registration
100/100 · No meaningful risk foundNo security findings

Guides Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration. USE FOR: create app registration, register Azure AD app, configure OAuth, set up authentication, add API permissions, generate service principal, MSAL example, console app auth, Entra ID setup, Azure AD authentication. DO NOT USE FOR: Key Vault secrets (use azure-keyvault-expiration-audit), general Azure resource security guidance.

Content hash
sha256:6b90664bd322389fb05434e8dc103c0d0f157ccd03a1c84bc6373b51a7632903
Files
17
Quality
100/100

Security findings

  • infoUnpinned package installSL501 · .github/plugins/azure-skills/skills/entra-app-registration/references/sdk/azure-identity-py.md:9
    pip install azure-identity

    Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.

  • infoUnpinned package installSL501 · .github/plugins/azure-skills/skills/entra-app-registration/references/sdk/azure-identity-ts.md:8
    npm install @azure/identity

    Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.

Files in this skill
  • SKILL.md8.0 KB
  • references/BICEP-EXAMPLE.bicep5.2 KB
  • references/api-permissions.md10.0 KB
  • references/auth-best-practices.md6.1 KB
  • references/cli-commands.md8.6 KB
  • references/console-app-example.md10.7 KB
  • references/first-app-registration.md7.2 KB
  • references/oauth-flows.md9.3 KB
  • references/troubleshooting.md7.4 KB
  • references/sdk/azure-identity-dotnet.md940 B
  • references/sdk/azure-identity-java.md1.2 KB
  • references/sdk/azure-identity-py.md1.1 KB
  • references/sdk/azure-identity-rust.md805 B
  • references/sdk/azure-identity-ts.md1.1 KB
  • references/sdk/azure-keyvault-py.md1.1 KB
  • references/sdk/azure-keyvault-secrets-ts.md1.0 KB
  • references/sdk/microsoft-azure-webjobs-extensions-authentication-events-dotnet.md1.5 KB

Questions about entra-app-registration

Is entra-app-registration safe to install?
Our scanner gave entra-app-registration grade A (100/100): no meaningful risk found. None of the 30 security rules matched. Static analysis cannot prove safety, so pin the reviewed revision with a lockfile.
How do I install entra-app-registration in Claude Code or Codex?
Run skillhash add github:microsoft/azure-skills/.github/plugins/azure-skills/skills/entra-app-registration. It downloads the exact commit, checks the grade against your policy, writes skills.lock and installs it into .claude/skills and .agents/skills.
What happens if entra-app-registration changes upstream?
Its content hash changes. skillhash verify fails in CI until you review the new version and update the lock. With a watch, you also get an alert.

More from microsoft/azure-skills