AZURE WEB PUBSUB / Microsoft
Azure Web PubSub Service Python
Pins the Web PubSub service Python skill, which prefers DefaultAzureCredential and says to limit client tokens with roles.
“Azure Web PubSub Service SDK for Python. Use for real-time messaging, WebSocket connections, and pub/sub patterns. Triggers: "azure-messaging-webpubsubservice", "WebPubSubServiceClient", "real-time", "WebSocket", "pub/sub". ”
01 / THE REASONING
Why this made the selection.
- The authentication block prefers DefaultAzureCredential and says connection strings and account or API keys bypass Entra audit and rotation.
- The best-practice list says to use roles to limit client permissions and to generate short-lived tokens.
02 / THE REVIEW RECORD
What we actually inspected.
Source review has boundaries.
A clear record is more useful than a “safe” badge.
Material inspected
- .github/plugins/azure-sdk-python/skills/azure-messaging-webpubsubservice-py/SKILL.md
- .github/plugins/azure-sdk-python/README.md
- README.md
- LICENSE
Our findings
- The authentication block prefers DefaultAzureCredential and says connection strings and account or API keys bypass Entra audit and rotation.
- Production is told to set AZURE_TOKEN_CREDENTIALS to prod, or to one specific credential, and the service-client sample constructs DefaultAzureCredential with require_envvar set true.
- The best-practice list says to use roles to limit client permissions and to generate short-lived tokens.
- The first token sample is an anonymous user with no roles. A following sample passes user_id and a roles list.
- Connection management shows close_connection with a reason and close_all_connections for a user id. Neither sample asks for confirmation.
Not established by this review
- The resource was not executed and its tools were not called.
- No token was minted and no connection was closed.
- references/capabilities.md and references/non-hero-scenarios.md were not opened.
- This was source reading only and is not a runtime or security certification.
- Not executed: it was not installed or run.
The review applies to the material and revision named here. A newer upstream release can change its behavior.
03 / PUT IT TO WORK
Add a skill to your workflow.
DOCUMENTED COMMAND
/plugin install azure-sdk-python@skillsCopying does not execute this command. It may retrieve a newer version than the reviewed source.
- The azure-sdk-python README shows /plugin install azure-sdk-python@skills.
- That command installs the azure-sdk-python plugin. It does not install this one file by itself.
- The same README shows npx skills add microsoft/skills --skill azure-sdk-python, which also targets that plugin rather than this file alone.
- The repository README quick start, npx skills add microsoft/skills, asks the operator to select skills and can install more than this file.
- The repository README plugin block shows /plugin install azure@skills for the azure plugin, which that README links to azure-skills, not to this file.
Before you start
- Copilot CLI if the plugin command is used
- The skill shows pip install lines for azure-messaging-webpubsubservice and azure-messaging-webpubsubclient, which this review did not run
- An Azure credential if the service-client samples are followed, which this review did not use
04 / FOLLOW THE EVIDENCE
The source trail.
Our notes are separate from the original resource.
Check upstream before adopting a new version.
https://github.com/microsoft/skills/blob/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/.github/plugins/azure-sdk-python/skills/azure-messaging-webpubsubservice-py/SKILL.md
Supports: DefaultAzureCredential preference and role-limited client tokens
https://github.com/microsoft/skills/blob/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/.github/plugins/azure-sdk-python/README.md
Supports: plugin install line for azure-sdk-python, not this file alone
- Repository README ↗Checked
https://github.com/microsoft/skills/blob/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/README.md
Supports: MIT statement and a different azure plugin install line
- Repository LICENSE ↗Checked
https://github.com/microsoft/skills/blob/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/LICENSE
Supports: MIT License
https://raw.githubusercontent.com/microsoft/skills/fc164ba1d7a0c10377dbcc1c9ac07253b9329fdb/.github/plugins/azure-sdk-python/skills/azure-messaging-webpubsubservice-py/SKILL.md
Supports: upstreamDescription, bestFor, review.reviewedAt, review.notTested