Better Auth Skills
better-auth/skillsSix official skills for the Better Auth TypeScript library: scaffolding auth, best practices, email and password, organizations, two-factor and security hardening.
With caveats
Check first Depth 2/5
Entra App Registration (Azure Skills) skill
Microsoft skill for registering Microsoft Entra ID apps, configuring OAuth 2.0 flows and API permissions, and wiring up MSAL.
Our verdict Recommended
A clear, official walkthrough for a task where small mistakes are easy; remember the CLI route creates real credentials.
What the entra-app-registration skill does
This skill guides an agent through Microsoft Entra ID application registration. SKILL.md explains the vocabulary (application and tenant IDs, client secret, redirect URI, API permissions, service principal), lists application types (web, SPA, native, daemon) and gives a core workflow: register the app in the portal, with the CLI, or preferably with infrastructure as code if the project already uses it; configure authentication for the app type; then add API permissions. Reference files cover Azure CLI commands (including creating a client secret with az ad app credential reset), OAuth 2.0 flows, API permission selection, a first-registration walkthrough, a console-app MSAL example, troubleshooting, and an auth best-practices note. There are 16 files in all and no scripts. The skill states what it is not for: Key Vault secret expiry and general Azure security guidance. It creates identities and credentials in your tenant when the CLI route is used, so the permissions of your signed-in account decide what is possible.
Good for
- First-time Entra app registration with the right redirect URIs and permissions
- Getting an MSAL console or daemon sample working
- Choosing between delegated and application permissions
Not for
- Key Vault secret rotation or expiry audits (use azure-compliance)
- Third-party identity providers
Depth 3/5
8 KB SKILL.md plus 15 reference files covering CLI, OAuth flows, permissions, examples and troubleshooting; no scripts or evals.
Dependencies and costs
- Azure account or subscription
- Azure CLI signed in with az login
- Azure MCP Server (installed with the plugin; needs Node.js 18+ for npx)
- Permission to create app registrations in the Entra tenant
- Telemetry: The skill files contain no telemetry code. The Azure MCP Server that the plugin wires in has its own telemetry; the repo README says to disable it with AZURE_MCP_COLLECT_TELEMETRY=false.
Security review
Review before installingDocumentation-only skill (17 files) on Microsoft Entra app registration, OAuth 2.0 and MSAL. Following it uses az ad commands that create identities, permissions and client secrets in your tenant, so those actions need your confirmation.
Worth knowing
- Relies on a CLI or package we could not reviewDocuments az ad commands that create app registrations and service principals, add API permissions, grant admin consent and reset client secrets..github/plugins/azure-skills/skills/entra-app-registration/SKILL.md:131
- Installs packages or toolsExample code tells you to add MSAL packages such as Microsoft.Identity.Client via dotnet, pip or npm..github/plugins/azure-skills/skills/entra-app-registration/references/console-app-example.md:18
What we checked
The skill folder (17 files) on Oct 29, 2026. Not a full review: 1 of 17 files were not downloaded (large repository; we reviewed the skill folders); it relies on code outside the repository: Azure CLI (az) and the az extensions it installs on demand; not part of the files we have; Azure MCP Server, started by the plugin through npx; its configuration sits outside this skill folder; MSAL packages named in the examples.
NVIDIA SkillSpector static scan: 37 pattern hits (Privilege Escalation 30, analysis-evasion 4, System Prompt Leakage 2, Excessive Agency 1). Hits are documentation: 'Access token' headings and 'Display instructions' wording in OAuth flow explanations. No executable code.
A review, not a certification. Skills change after we check them — read the files before installing.
License
MIT (declared in the SKILL.md frontmatter); the repo is a mirror synced from microsoft/GitHub-Copilot-for-Azure and has no top-level LICENSE file in our copy. Commercial use allowed under MIT.
Can it run unattended?
Not really. Registration involves consent, redirect URIs and secrets that need a human decision at each step.
Alternatives
Cloudflare Skills
cloudflare/skillsCloudflare's official 19-skill pack for building on Workers, Durable Objects, the Agents SDK, Cloudflare One and more, with an optional bundled MCP server.
Recommended
Check first Depth 4/5
Google Agent Skills
google/skillsGoogle's official collection of about 180 skills for Google Cloud, Gemini APIs, Analytics, Data Manager, sign-in and other Google products.
Recommended
Broad access Depth 3/5
FAQ
What does the entra-app-registration skill do?
It guides an agent through creating a Microsoft Entra ID app registration, configuring authentication for the app type, adding API permissions and implementing MSAL sign-in, using the portal, Azure CLI or IaC.
Does it create client secrets?
The CLI reference includes commands that create a client secret. A secret is shown only at creation time, so keep it out of source control and chat logs and prefer managed identity or certificates where possible.
How do I install entra-app-registration?
Install Microsoft's Azure plugin: /plugin install azure@claude-plugins-official in Claude Code, or add microsoft/azure-skills as a Codex marketplace. You need rights to register apps in your tenant.
entra-app-registration vs better-auth skills?
This skill is for Microsoft Entra ID and the Microsoft identity platform. better-auth/skills targets the Better Auth library for application-level authentication.
Sources: GitHub repository; install counts from skills.sh via Best Skills (CC BY 4.0). Review based on the published SKILL.md.