azure-vpn-gateway
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and fetches documentation from official Microsoft Learn domains (learn.microsoft.com). These are authoritative vendor sources and are considered safe.
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external data into the agent's context, creating a potential surface for indirect prompt injection.
- Ingestion points: Documentation is retrieved via the
mcp_microsoftdocs:microsoft_docs_fetchorWebFetchtools from URLs listed in SKILL.md. - Boundary markers: The instructions do not define explicit boundary markers or provide 'ignore instructions' warnings for the fetched content.
- Capability inventory: The skill does not possess any dangerous capabilities such as file system writing, subprocess execution, or arbitrary code evaluation.
- Sanitization: No sanitization or validation mechanisms for the incoming Markdown content are specified.
- [SAFE]: No obfuscation, hardcoded credentials, privilege escalation, or persistence mechanisms were detected. The skill's operations are consistent with its described function as a documentation assistant.
Audit Metadata