azure-troubleshooting
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external, untrusted data from Azure Activity Logs and monitoring alerts, creating a potential surface for indirect prompt injection.
- Ingestion points: Azure Activity Logs, Resource Health events, and monitoring alert text are processed during the 'Live Fact Collection' and 'Service Branch' phases.
- Boundary markers: The skill instructs the agent to separate 'facts' from 'interpretations' and mandates verification of service-specific claims using official Microsoft Learn URLs, providing logical boundaries for processed data.
- Capability inventory: The skill utilizes Azure CLI (
az) and PowerShell (Invoke-RestMethod) for data retrieval and writes reports to the localTroubleshooting/directory. - Sanitization: While no explicit string escaping is defined, the workflow requires grounding all interpretations in official documentation to mitigate data poisoning.
- [COMMAND_EXECUTION]: The instructions guide the agent to use Azure CLI and PowerShell for gathering diagnostic information.
- Evidence: Multiple Azure CLI commands are referenced, including
az vm get-instance-view,az aks show, andaz resource showfor resource inspection. - Evidence:
references/service-branches.mdincludes guidance for using PowerShell'sInvoke-RestMethodto query Log Analytics APIs. - [EXTERNAL_DOWNLOADS]: The skill references official Microsoft Learn documentation for behavior verification.
- Evidence: The 'Workflow' and 'Official Grounding' sections require the use of Microsoft Learn URLs to verify observations, which are recognized as trusted official sources.
Audit Metadata