azure-iot
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches documentation from Microsoft's official learning platform.
- Evidence: Multiple URLs pointing to
https://learn.microsoft.com/en-us/azure/iot/for various IoT configurations and design patterns. - [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it is designed to ingest and process content from external web pages.
- Ingestion points: Remote documentation fetched via
mcp_microsoftdocs:microsoft_docs_fetchorWebFetchfrom URLs listed inSKILL.md(Lines 47-70). - Boundary markers: Absent. The skill does not provide specific instructions to the agent to ignore potentially malicious instructions embedded in the external documentation content.
- Capability inventory: The skill uses network tools to retrieve external content for the agent to process.
- Sanitization: Absent. There is no evidence of filtering or validation of the fetched external content before it is processed by the agent.
Audit Metadata