azure-boards
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and fetches documentation from official Microsoft domains (learn.microsoft.com). These resources are provided by a well-known and trusted organization.
- [INDIRECT_PROMPT_INJECTION]: The skill provides a surface for indirect prompt injection by fetching external documentation content at runtime.
- Ingestion points: Data is ingested from external URLs via the
microsoft_docs_fetchandWebFetchtools as defined inSKILL.md. - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are specified for the fetched content.
- Capability inventory: The skill environment permits file reading and network-based documentation retrieval.
- Sanitization: The instructions do not specify sanitization or validation of the retrieved documentation content.
Audit Metadata