azure-iot-edge-module
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill's Dockerfile templates (
assets/template-Dockerfile.amd64andassets/template-Dockerfile.amd64.debug) contain instructions to download the Microsoft artifact credential provider and the VS debugger. These downloads target official and well-known Microsoft resources (raw.githubusercontent.com/Microsoft/andaka.ms). - [COMMAND_EXECUTION]: The skill executes local Python scripts and shell commands to perform project structure detection, manifest updates, and solution file management. These operations are performed on the local filesystem using inputs derived from the project's own files or direct user prompts. Shell arguments are properly quoted to mitigate common injection risks.
- [INDIRECT_PROMPT_INJECTION]: The skill acts as an automated scaffolding tool that ingests data from existing project files (such as C# source code, Dockerfiles, and deployment manifests) to determine configuration values.
- Ingestion points: Files like
Program.cs,module.json, and*.deployment.manifest.jsonare scanned byscripts/detect_project_structure.pyandscripts/scan_manifests.py. - Boundary markers: The skill does not use explicit delimiters when interpolating detected project data into new files, but it relies on strict templates in the
assets/directory. - Capability inventory: Capabilities include file creation, directory creation, and modification of existing manifest and solution files via subprocess calls.
- Sanitization: The skill relies on the user to confirm detected project settings (Step 1.5) and normalized module names (Step 3) before proceeding with file generation.
Audit Metadata