๐ฆ
content-creator
88Create Brand-Consistent Marketing Content
Marketing teams need content that stays consistent across channels. This skill helps plan, write, analyze, and optimize content for brand voice and SEO.
Writing & Content View
Skills azure-identity-java
๐ฆ
azure-identity-java
Content revision r2 Medium Risk โ๏ธ External commands๐ Network access๐ Filesystem access๐ Env variables
Configure Azure Identity Authentication in Java
Java applications need secure authentication across local development, Azure hosting, pipelines, and interactive clients. This skill explains Azure Identity credentials, configuration patterns, and selection guidance.
Supports: Claude Codex Code(CC)
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "azure-identity-java" from https://skillstore.io/skills/sickn33-azure-identity-java.md and its manifest at https://skillstore.io/api/skills/sickn33-azure-identity-java/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "azure-identity-java". Which credential should a Java API on Azure App Service use for Blob Storage?
Expected outcome:
- Recommendation: use the App Service managed identity through DefaultAzureCredential.
- Access: assign only the required Blob Storage data role to that identity.
- Validation: test token acquisition and storage authorization in the deployed environment.
Using "azure-identity-java". Plan migration of an AKS Java service from a client secret to workload identity.
Expected outcome:
- Create a federated identity relationship for the Kubernetes service account.
- Grant the identity the minimum Azure roles required by the service.
- Configure workload identity variables and remove the stored client secret after validation.
Using "azure-identity-java". Help diagnose DefaultAzureCredential failures in local development.
Expected outcome:
- Confirm Azure CLI login state and selected tenant.
- Review excluded credential sources and application tenant restrictions.
- Enable diagnostic logging temporarily, while keeping account identifiers and secrets protected.
Security Audit
Medium Riskv5 โข 7/23/2026 Open versioned report
All 82 static findings are false positives caused by Markdown syntax, placeholder credentials, and legitimate Azure or loopback URLs. The skill contains no executable scripts, secret values, arbitrary command execution, or prompt injection. One medium semantic issue remains: a token-caching example actually enables account identifier logging and may expose identifiers.
1
Files scanned
377
Lines analyzed
0
Review items
0
False positives ignored
Confirmed security concerns (1)
Medium
Account Identifier Logging Presented as Token Caching
The token caching example enables account identifier logging, and another example encourages logging account information. Copied configurations may expose identifiers in retained logs.
The method name and adjacent comments directly show account identifier logging. The first example incorrectly labels that method as token caching.
Risk Factors
โ๏ธ External commands (50)
SKILL.md:15-21 SKILL.md:21-27 SKILL.md:27-28 SKILL.md:28-29 SKILL.md:29-30 SKILL.md:30-31 SKILL.md:31-32 SKILL.md:32 SKILL.md:33-34 SKILL.md:34-38 SKILL.md:38-47 SKILL.md:47-64 SKILL.md:64-68 SKILL.md:68-75 SKILL.md:75-81 SKILL.md:81-98 SKILL.md:98-102 SKILL.md:102-111 SKILL.md:111-115 SKILL.md:115-140 SKILL.md:140-146 SKILL.md:146-151 SKILL.md:151-156 SKILL.md:156-160 SKILL.md:160-163 SKILL.md:163-168 SKILL.md:168-171 SKILL.md:171-176 SKILL.md:176-180 SKILL.md:180-182 SKILL.md:182-189 SKILL.md:189-195 SKILL.md:195-203 SKILL.md:203-209 SKILL.md:209-220 SKILL.md:220-226 SKILL.md:226-234 SKILL.md:234-240 SKILL.md:240-253 SKILL.md:253-259 SKILL.md:259-269 SKILL.md:269-273 SKILL.md:273-285 SKILL.md:285-289 SKILL.md:289-304 SKILL.md:304-310 SKILL.md:310-318 SKILL.md:318-322 SKILL.md:322-339 SKILL.md:339-345
๐ Network access (5)
๐ Filesystem access (1)
Audited by: codex View Audit History โ
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/sickn33-azure-identity-java/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/sickn33-azure-identity-java?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/sickn33-azure-identity-java?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-azure-identity-java/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/sickn33-azure-identity-java.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA ยท BibTeX ยท CFF)
APA citation
sickn33. (2026). azure-identity-java security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-azure-identity-java/audits/5BibTeX citation
@techreport{sickn33-sickn33-azure-identity-java-2026,
author = {sickn33},
title = {azure-identity-java security audit report (audit version 5)},
institution = {Skillstore},
year = {2026},
number = {5},
url = {https://skillstore.io/skills/sickn33-azure-identity-java/audits/5},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "azure-identity-java security audit report (audit version 5)"
version: "unspecified"
type: report
authors:
- name: "sickn33"
date-released: "2026-07-23"
url: "https://skillstore.io/skills/sickn33-azure-identity-java/audits/5"
identifiers:
- type: other
value: "skillstore:sickn33-azure-identity-java:audit:5"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: High 55
Architecture
85
Maintainability
87
Content
68
Community
83
Spec Compliance
What You Can Build
Secure an Azure-hosted service
Select managed identity credentials and connect a Java backend to Azure services without stored application secrets.
Configure pipeline authentication
Choose environment or workload identity settings for Java builds that access Azure resources during automated delivery.
Design interactive authentication
Compare browser, device code, and Azure CLI credentials for desktop applications and command-line tools.
Try These Prompts
Choose a credential
My Java application runs in [environment] and accesses [Azure service]. Recommend an Azure Identity credential and explain the selection.
Configure DefaultAzureCredential
Create a Java authentication plan using DefaultAzureCredential for [environment]. Include required setup, allowed credential sources, Azure client integration, and validation steps.
Remove stored client secrets
Review my Java service authentication approach and plan a migration from client secrets to [managed identity or workload identity]. Address permissions and deployment changes.
Design multi-environment authentication
Design Azure Identity authentication for local development, CI/CD, AKS, and production. Define credential precedence, tenant restrictions, sovereign-cloud support, logging controls, and failure handling.
Best Practices
- Use managed identity or workload identity in Azure-hosted production environments to avoid stored secrets.
- Grant least privilege and verify tenant, role, endpoint, and redirect configuration for each environment.
- Disable verbose and account identifier logging after debugging, and never place secrets in code or logs.
Avoid
- Do not hardcode client secrets, passwords, certificate passwords, or tokens in Java source.
- Do not use broad DefaultAzureCredential chains in production without reviewing allowed credential sources.
- Do not enable account identifier or verbose logging in production without privacy and retention controls.
Frequently Asked Questions
Does this skill authenticate to Azure for me?
No. It provides Java guidance and examples. You must configure Azure identities, permissions, endpoints, and runtime settings.
Which credential should most applications start with?
DefaultAzureCredential is useful across environments. Production deployments should restrict its sources or use a specific managed identity credential.
Can I use the examples without Azure CLI?
Yes. Managed identity, workload identity, environment, certificate, browser, and device code credentials support other environments and application types.
Does the skill support sovereign Azure clouds?
Yes. It shows authority host selection for Azure Government and Azure China.
Does the skill store or rotate secrets?
No. Use managed identity when possible or an approved secret manager and rotation process.
Is the listed dependency version always current?
No. The example uses Azure Identity 1.15.0. Verify the latest compatible release and security advisories before adoption.
Developer Details
Author
sickn33License
MIT
Skillstore revision
r2
Version notice
The author did not declare a version.
Repository
https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/azure-identity-javaRef
f9e2c34b4f19c7f3e6b0a1e93227b5f77cc12526
Maintenance freshness
7/26/2026
Usage
7 downloads ยท 74 views
File structure
๐ SKILL.md
More from sickn33
View all๐ฆ
prompt-engineering-patterns
85Improve LLM Prompts With Proven Patterns
Inconsistent prompts waste time and make AI outputs hard to trust. This skill guides prompt design with reusable patterns, examples, evaluation steps, and optimization workflows.
Productivity View
๐ฆ
senior-fullstack
82Build Fullstack Apps with Senior Patterns
Teams need consistent setup, architecture, and review guidance for modern web applications. This skill provides scaffolders, workflow references, and quality prompts for React, Next.js, Node.js, GraphQL, and PostgreSQL projects.
Coding & Development View
๐ฆ
senior-architect
81Design Scalable Software Architectures
Architecture decisions are hard to compare across web, mobile, backend, and cloud systems. This skill provides structured guides and local scaffold scripts for reports, dependency review, and trade-off documentation.
Coding & Development View
๐ฆ
prompt-engineer
81Optimize AI Prompts With Prompt Engineer
Writing clear prompts is hard when goals are vague or complex. This skill turns rough requests into structured prompts using proven prompt frameworks.
Productivity View
๐ฆ
product-manager-toolkit
80Prioritize Product Work With Research Insights
Product teams need faster ways to rank features, synthesize interviews, and document decisions. This skill provides RICE scoring, interview analysis, and PRD templates for structured planning.
Productivity View
Related Skills
View all๐ฆ
api-designer
84Design Production-Ready APIs
by AutumnsGrove
Inconsistent API contracts create integration errors and costly migrations. This skill guides REST, GraphQL, OpenAPI, authentication, versioning, validation, and documentation decisions.
Coding & Development View
๐ฆ
alibaba-java-coding-guidelines-skill
82ๅฎกๆฅ Java ไปฃ็ ๆฏๅฆ็ฌฆๅ้ฟ้่ง่
by ns3154
Java ๅข้้่ฆ็ปไธ็็ผ็ ่ง่ๅๅฎกๆฅๅฃๅพใๆฌ skill ไฝฟ็จ้ฟ้ๅทดๅทด Java ๅผๅๆๅๆๅฏผๅฎกๆฅใ็ๆๅ้ๆใ
Coding & Development View
๐ฆ
convex-setup-auth
80Set Up Convex Authentication
by get-convex
Convex auth setup can fail when provider wiring, environment variables, and backend checks do not match. This skill guides the correct provider flow and adds verified Convex authentication patterns.
Coding & Development View
๐ฆ
http-api-cloudbase
80Build CloudBase HTTP API Clients
by tencentcloudbase
CloudBase teams need reliable raw HTTP integrations when SDKs are unavailable. This skill guides endpoint selection, authentication, OpenAPI lookup, and safe request construction.
Coding & Development View
๐ฆ
java-springboot
78Build Better Spring Boot Applications
by github
Spring Boot projects can become inconsistent across architecture, configuration, data access, and testing. This skill provides focused practices for maintainable Java applications.
Coding & Development View
๐ฆ
allra-api-design
78Design Consistent Spring Boot APIs
by Allra-Fintech
Inconsistent API structure and DTO naming make Java services harder to maintain. This skill applies Allra conventions for Spring Boot endpoints, validation, responses, and packages.
Coding & Development View