BC Observatoryunofficial, made by waldo
code change · featureAL Developmentofficial - Microsoftreviewed - checked by Opus

#187 Code reviewer skill for recognizing and validating unauthenticated responses

A new code reviewer skill was added to detect unauthenticated URL usage and validate the required response checks that must be enforced in those scenarios.

Open in Claude187.mdPull request #187

Pull request · merged into main on 2026-09-16 by dcenic · 3 files (+91 -0), 3 AL · feature · tier official · reviewed (checked by Opus)

What changed

  • New skill for recognizing when code uses unauthenticated URLs
  • Specifies which response validation checks are mandatory for unauthenticated scenarios
  • Includes both bad and good code examples with documentation
  • Helps enforce security best practices in extension code

AL objects touched

  • microsoft/knowledge/security/validate-unauthenticated-response-before-use.bad.al: added, not in the BC? snapshot yet
  • microsoft/knowledge/security/validate-unauthenticated-response-before-use.good.al: added, not in the BC? snapshot yet
  • microsoft/knowledge/security/validate-unauthenticated-response-before-use.md: added, not in the BC? snapshot yet

Context

  • Systems: development, administration

Source: metadata of a merged pull request in microsoft/BCQuality (bcquality): title, labels, changed paths and counts, with a summary in our words. No source text and no description beyond one short quote (D10, D61).