Entra ID on Top AI Skills

entra-agent-id: One Azure Identity Per AI Agent Instance

Wed, 16 Sep 2026 00:00:00 +0000

Most AI agents on Azure still share one service principal. Every instance logs in as “the bot,” writes to the same mailbox, and leaves no way to tell which run did the damage. Microsoft’s entra-agent-id skill (v1.1.1, MIT) kills that pattern: it provisions a distinct Entra identity per agent instance, each with its own sub claim, its own permission grants, and its own audit trail. I read the SKILL.md and its runtime-token-exchange.md reference in full, then pulled skills.sh on 2026-09-16: rank 189, 305,269 all-time installs, weekly curve off a 16,986 peak down to 12,678.

entra-app-registration: OAuth Setup Without Portal Spelunking

Tue, 15 Sep 2026 00:00:00 +0000

Most Azure tutorials describe app registration as “five clicks in the portal” and leave you guessing which Graph permission GUID goes where. Microsoft’s entra-app-registration skill (v1.2.1, MIT) does the opposite: its SKILL.md is a router, and its reference files carry the full CLI grammar — sign-in audiences, permission GUIDs, credential reset warnings — that agents (and humans) actually need. I read the SKILL.md plus cli-commands.md and oauth-flows.md in full, then scraped skills.sh on 2026-09-15: the skill ranks 52 with 581,057 installs, riding the same pack-wide curve as its siblings.