commitment-analysis
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill retrieves data from multiple Azure management tools, establishing a surface for indirect prompt injection if the source records contain malicious payloads.
- Ingestion points: Outputs from
list_benefit_utilization,get_benefit_recommendations,query_costs,list_reservation_transactions, andexecute_queryare consumed by the agent. - Boundary markers: The instructions lack specific delimiters or guardrail prompts to ignore potential commands embedded within the retrieved tool data.
- Capability inventory: The skill possesses the ability to execute resource discovery via
execute_queryand access sensitive financial data viaquery_costs. - Sanitization: A
validate_querystep is utilized to verify query structure and property paths prior to execution. - [DYNAMIC_EXECUTION]: The skill dynamically generates and runs KQL (Kusto Query Language) queries for the Azure Resource Graph at runtime.
- It leverages
generate_queryto adapt query templates based on the specific resource types found in the user's environment. - Execution occurs via
execute_queryonly after the query has passed a syntax validation check.
Audit Metadata