azure-resource-lookup

Warn

Audited by Gen Agent Trust Hub on May 3, 2026

Risk Level: MEDIUMPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [PROMPT_INJECTION]: The skill's metadata identifies 'Microsoft' as the author, which is deceptive as the skill originates from an external source. This misattribution can lead to an incorrect assessment of the skill's trustworthiness.\n- [COMMAND_EXECUTION]: The skill instructs the agent to execute az graph query commands. These are legitimate operations used to retrieve resource metadata from the Azure Resource Graph service.\n- [EXTERNAL_DOWNLOADS]: The skill uses the az extension add command to download and install the official Resource Graph extension from Microsoft's infrastructure. This is an expected and safe operation for using Azure's inventory capabilities.
Audit Metadata
Risk Level
MEDIUM
Analyzed
May 3, 2026, 05:51 AM