Guides Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration. USE FOR: create app registration, register Azure AD app, configure OAuth, set up authentication, add API permissions, generate service principal, MSAL example, console app auth, Entra ID setup, Azure AD authentication. DO NOT USE FOR: Azure RBAC or role assignments (use azure-rbac), Key Vault secrets (use azure-keyvault-expiration-audit), Azure resource security (use azure-security).
Install with Tessl CLI
npx tessl i github:microsoft/github-copilot-for-azure --skill entra-app-registration85
Does it follow best practices?
If you maintain this skill, you can automatically optimize it using the tessl CLI to improve its score:
npx tessl skill review --optimize ./path/to/skillEvaluation — 93%
↑ 1.22xAgent success when using this skill
Validation for skill structure
Discovery
100%Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.
This is an excellent skill description that hits all the key criteria. It provides specific capabilities, comprehensive trigger terms covering both legacy and current Azure naming conventions, explicit 'USE FOR' and 'DO NOT USE FOR' clauses, and clear differentiation from related Azure skills. The description is well-structured and actionable for skill selection.
| Dimension | Reasoning | Score |
|---|---|---|
Specificity | Lists multiple specific concrete actions: 'app registration', 'OAuth 2.0 authentication', 'MSAL integration', 'configure OAuth', 'add API permissions', 'generate service principal', 'console app auth'. | 3 / 3 |
Completeness | Clearly answers both what (guides app registration, OAuth, MSAL integration) and when (explicit 'USE FOR:' clause with trigger terms, plus 'DO NOT USE FOR:' to clarify boundaries). | 3 / 3 |
Trigger Term Quality | Excellent coverage of natural terms users would say: 'create app registration', 'register Azure AD app', 'configure OAuth', 'set up authentication', 'MSAL example', 'Entra ID setup', 'Azure AD authentication' - covers both old (Azure AD) and new (Entra ID) naming. | 3 / 3 |
Distinctiveness Conflict Risk | Explicitly distinguishes itself from related Azure skills (azure-rbac, azure-keyvault-expiration-audit, azure-security) with a 'DO NOT USE FOR:' clause, creating clear boundaries and reducing conflict risk. | 3 / 3 |
Total | 12 / 12 Passed |
Implementation
57%Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.
This skill provides a well-structured overview of Entra ID app registration with good progressive disclosure to reference materials. However, it over-explains concepts Claude already knows, lacks executable code in the main file, and misses validation checkpoints in the workflow that would help catch configuration errors early.
Suggestions
Remove the introductory explanation of what Entra ID is and the concept tables - Claude knows these; start directly with the workflow
Add at least one executable CLI command or code snippet directly in the main file (e.g., a complete `az ad app create` command with common flags)
Add explicit validation steps to the workflow, such as 'Verify: `az ad app show --id <app-id>` should return your app details' after registration
Include a quick verification checklist at the end of the core workflow to confirm the registration is complete and functional
| Dimension | Reasoning | Score |
|---|---|---|
Conciseness | The skill includes some unnecessary explanations Claude already knows (e.g., 'Microsoft Entra ID is Microsoft's cloud-based identity and access management service') and concept tables that pad the content. However, it's reasonably organized and not excessively verbose. | 2 / 3 |
Actionability | The skill provides structured guidance but lacks executable code examples directly in the main file. Most concrete implementations are deferred to reference files, leaving the main skill with procedural descriptions rather than copy-paste ready commands or code. | 2 / 3 |
Workflow Clarity | The 5-step workflow is clearly sequenced, but lacks explicit validation checkpoints. There's no 'verify your registration worked' step, no error recovery guidance, and no feedback loops for catching misconfigurations before proceeding. | 2 / 3 |
Progressive Disclosure | Excellent use of progressive disclosure with a clear overview and well-signaled one-level-deep references to detailed materials. The SDK quick references, common patterns, and reference sections are well-organized for navigation. | 3 / 3 |
Total | 9 / 12 Passed |
Validation
100%Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.
Validation — 11 / 11 Passed
Validation for skill structure
No warnings or errors.
Table of Contents
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.