Skills/skills.sh/entra-agent-id

entra-agent-id@r1

CAUTION

Publisher claims: "Provision Microsoft Entra Agent Identity Blueprints, BlueprintPrincipals, and per-instance Agent Identities via Microsoft Graph, and configure OAuth 2.0 token exchange (fmi_path, OBO, cross-tenant) including the Microsoft Entra SDK for AgentID sidecar. USE FOR: Agent Identity Blueprint, BlueprintPrincipal, agent OAuth, fmi_path token exchange, agent OBO, Workload Identity Federation for agents, polyglot agent auth, Microsoft.Identity.Web.AgentIdentities. DO NOT USE FOR: standard Entra app registration (use entra-app-registration), Microsoft Foundry agent authoring (use microsoft-foundry)." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry skills.shPublisher microsoft · joined 2 days agoInstalls 334KLast detonated 39 h ago
Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

MEDIUM
URL using raw IP addressreferences/sdk-sidecar-deployment.md:168 · URL using raw IP address — may bypass domain-based filtering
AST07
HIGH
Outbound HTTP to raw IP addressreferences/sdk-sidecar-deployment.md:168 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
Python subprocess execution detectedSKILL.md:136 · Python subprocess execution detected
AST05
CRITICAL
Access to sensitive file pathsreferences/sdk-sidecar-deployment.md:47 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
MEDIUM
URL using raw IP addressreferences/sdk-sidecar-deployment.md:184 · URL using raw IP address — may bypass domain-based filtering
AST07
HIGH
Outbound HTTP to raw IP addressreferences/sdk-sidecar-deployment.md:184 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
CRITICAL
Access to sensitive file pathsreferences/sdk-sidecar-deployment.md:46 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05