---
id: change/bcquality/187
type: change
title: "#187 Code reviewer skill for recognizing and validating unauthenticated responses"
summary: A new code reviewer skill was added to detect unauthenticated URL usage and validate the required response checks that must be enforced in those scenarios.
tier: official
language: en
tags:
  - feature
  - main
system: development
review:
  state: reviewed
  by: opus
  at: "2026-10-08T02:04:59.187Z"
  flags: []
generated:
  at: "2026-10-08T01:26:53.141Z"
  pipeline: 0.2.0
  prompts:
    extract-change: 1
  input_hash: 8ff2326b61ae667d9ba44471fcb3ba09364bd9b9
evidence:
  - kind: code
    url: https://github.com/microsoft/BCQuality/pull/187
    title: "microsoft/BCQuality#187: Code reviewer skill for recognizing and validating unauthenticated responses"
    date: "2026-09-16"
    commit: 8ff2326b61ae667d9ba44471fcb3ba09364bd9b9
    t: null
    quote: null
links:
  learn: []
  objects: []
  features: []
  topics: []
  localizations: []
  videos: []
  posts: []
  guidelines: []
  changes: []
number: 187
repo: microsoft/BCQuality
source_id: bcquality-prs
url: https://github.com/microsoft/BCQuality/pull/187
kind: pr
base_branch: main
major: null
merged_at: "2026-09-16T07:50:14Z"
author: dcenic
author_type: User
community_contribution: false
labels: []
change_class: code
change_kind: feature
behavior_change: false
breaking: false
files:
  count: 3
  additions: 91
  deletions: 0
  al: 3
apps: []
objects_touched: []
objects_unjoined:
  - path: microsoft/knowledge/security/validate-unauthenticated-response-before-use.bad.al
    status: added
    reason: not-in-snapshot
  - path: microsoft/knowledge/security/validate-unauthenticated-response-before-use.good.al
    status: added
    reason: not-in-snapshot
  - path: microsoft/knowledge/security/validate-unauthenticated-response-before-use.md
    status: added
    reason: not-in-snapshot
obsoletions: []
backports: []
fixes_issues: []
work_items: []
systems:
  - development
  - administration
quote: null
joined_against:
  major: null
  commit: null
---

# #187 Code reviewer skill for recognizing and validating unauthenticated responses

> A new code reviewer skill was added to detect unauthenticated URL usage and validate the required response checks that must be enforced in those scenarios.

[Pull request](https://github.com/microsoft/BCQuality/pull/187) · merged into `main` on 2026-09-16 by dcenic · 3 files (+91 -0), 3 AL · feature · tier official · reviewed (checked by Opus)

## What changed

- New skill for recognizing when code uses unauthenticated URLs
- Specifies which response validation checks are mandatory for unauthenticated scenarios
- Includes both bad and good code examples with documentation
- Helps enforce security best practices in extension code

## AL objects touched

- `microsoft/knowledge/security/validate-unauthenticated-response-before-use.bad.al`: added, not in the BC? snapshot yet
- `microsoft/knowledge/security/validate-unauthenticated-response-before-use.good.al`: added, not in the BC? snapshot yet
- `microsoft/knowledge/security/validate-unauthenticated-response-before-use.md`: added, not in the BC? snapshot yet

## Context

- Systems: development, administration

Source: metadata of a merged pull request in microsoft/BCQuality (bcquality): title, labels, changed paths and counts, with a summary in our words. No source text and no description beyond one short quote (D10, D61).