azure-messaging
Warn
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: MEDIUMMETADATA_POISONINGINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [METADATA_POISONING]: The skill's metadata claims the author is 'Microsoft', which conflicts with the provided distribution context. This deceptive metadata may lead users or agents to incorrectly attribute the skill's provenance and trust its outputs as official vendor guidance.
- [INDIRECT_PROMPT_INJECTION]: The troubleshooting workflow involves the ingestion and processing of untrusted data from user error logs and environment configurations.
- Ingestion points: User-supplied error messages, SDK versions, and log snippets processed via the instructions in
SKILL.md. - Boundary markers: The skill does not define specific delimiters or instructions to prevent the agent from following directions embedded within user-provided error logs.
- Capability inventory: The skill utilizes tools like
mcp_azure_mcp_monitorfor querying diagnostic logs andmcp_azure_mcp_documentationfor searching external references. - Sanitization: There are no explicit instructions to escape or sanitize user-provided data before it is interpolated into tool queries or search parameters.
- [COMMAND_EXECUTION]: The documentation includes instructions for users to manually execute diagnostic shell commands.
- The file
references/service-troubleshooting.mdsuggests usingcurl,nslookup, andnetstatfor connectivity testing. These are standard diagnostic procedures for verifying network reachability.
Audit Metadata