azure-table-storage
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches content from
learn.microsoft.com, which is the official documentation platform for Microsoft Azure. This is a trusted source for technical information. - [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection because it is designed to ingest and process data from external URLs.
- Ingestion points: Technical documentation URLs hosted on
learn.microsoft.comas listed inSKILL.md(e.g., performance checklists and design patterns). - Boundary markers: No explicit delimiters or instructions are provided to the agent to treat the fetched content as untrusted data.
- Capability inventory: The skill's functionality is limited to information retrieval; it does not include capabilities for file system modification, network exfiltration, or arbitrary command execution.
- Sanitization: There are no documented sanitization or filtering steps for the retrieved markdown content.
Audit Metadata