azure-vm-scalesets
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches technical documentation from official Microsoft domains (learn.microsoft.com). These references provide context for Azure Virtual Machine Scale Sets development and troubleshooting.
- [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it ingests content from external documentation into the agent's context.
-
- Ingestion points: External Markdown content retrieved from learn.microsoft.com via the microsoft_docs_fetch tool.
-
- Boundary markers: Absent; the skill does not explicitly instruct the agent to ignore instructions embedded within the fetched documentation.
-
- Capability inventory: None; the skill is documentation-focused and does not include executable scripts, file-writing capabilities, or network exfiltration logic.
-
- Sanitization: Absent; content is processed as retrieved without secondary validation.
- [NO_CODE]: The skill consists entirely of markdown instructions and documentation links without accompanying scripts or executables.
Audit Metadata