·
Last changedVersion:
This version passed the hardening gate. Hardening applied 1 targeted change and preserved all other text. Classified findings before hardening: 3. Classified findings closed: 3. Classified findings remaining: 0. Unclassified scanner findings remaining: 0. Review findings closed: 6. Review findings remaining: 8.
1
2
None
Expand | File | Group | Subtype | Severity | Status |
|---|---|---|---|---|---|
SKILL.md | Supply Chain & Install-Time Trust | — | Medium | Closed | |
SKILL.md | Malicious Code & Command Execution | — | Low | Closed | |
SKILL.md | Supply Chain & Install-Time Trust | Install-time download and execute | Low | Closed |
3 findings
| Need | Tool | Example |
|---|---|---|
API method/class lookup |
|
|
Working code sample |
|
|
Full API reference |
| Fetch URL from |
Use microsoft_code_sample_search to get official, working examples:
When to use:
Fetch full page when method has multiple overloads or you need complete parameter details.
Use microsoft_code_sample_search to find working code samples and compare with your implementation. For specific errors, use microsoft_docs_search and microsoft_docs_fetch:
| Error Type | Query |
|---|---|
Method not found |
|
Type not found |
|
Wrong signature |
|
Deprecated warning |
|
Auth failure |
|
403 Forbidden |
|
Always verify when:
UploadFile vs actual Upload)CloudBlobClient vs v12 BlobServiceClient)Azure.* for .NET, azure-* for Python)Before generating code using Microsoft SDKs, verify it's correct:
microsoft_docs_search(query: "[ClassName] [MethodName] [Namespace]")microsoft_docs_fetch(url: "...")microsoft_code_sample_search(query: "[task]", language: "[lang]")For simple lookups, step 1 alone may suffice. For complex API usage, complete all three steps.
If the Learn MCP server is not available, use the mslearn CLI from a terminal or shell (for example, Bash, PowerShell, or cmd) instead:
| MCP Tool | CLI Command |
|---|---|
|
|
|
|
|
|
Pass --json to search or code-search to get raw JSON output for further processing.
Get started with chainctlchainctl skill install public/github/microsoft-code-reference:latest
Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.
skills.cgr.dev/public/github.com/github/skills/microsoft-code-reference:latest
MIT
HARDENING.md
LICENSE
SKILL.md