azure-infra-validation
Warn
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The PowerShell scripts
scripts/check-vpn-lab-status.ps1andscripts/watch-az-resource-state.ps1act as wrappers that dynamically resolve and execute scripts located in a relative parent directory (../../../../scripts/) usingJoin-Pathand the call operator (&). - [COMMAND_EXECUTION]: The skill is designed to execute Azure CLI (
az) commands for infrastructure provisioning, configuration, and monitoring within the user's Azure environment. - [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it ingests and processes untrusted data which is subsequently used in CLI operations.
- Ingestion points: Processes user-provided
tenant ID,subscription ID, andtarget topologyas defined inSKILL.mdandreferences/validation-runbook.md. - Boundary markers: No explicit delimiters or warnings to ignore embedded instructions are present in the prompt templates.
- Capability inventory: Extensive resource management capabilities via Azure CLI (
az) and local PowerShell execution. - Sanitization: No evidence of input sanitization or validation for the Azure identifiers or topology descriptions is provided in the instructions.
Audit Metadata