azure-resource-lookup
Warn
Audited by Gen Agent Trust Hub on May 3, 2026
Risk Level: MEDIUMPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill's metadata identifies 'Microsoft' as the author, which is deceptive as the skill originates from an external source. This misattribution can lead to an incorrect assessment of the skill's trustworthiness.\n- [COMMAND_EXECUTION]: The skill instructs the agent to execute
az graph querycommands. These are legitimate operations used to retrieve resource metadata from the Azure Resource Graph service.\n- [EXTERNAL_DOWNLOADS]: The skill uses theaz extension addcommand to download and install the official Resource Graph extension from Microsoft's infrastructure. This is an expected and safe operation for using Azure's inventory capabilities.
Audit Metadata