pricing-estimate
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill involves a workflow where the agent is instructed to download and parse external CSV data (Azure pricesheets) from a SAS URL provided by the Azure billing service.
- Ingestion points: The
downloadUrl(a SAS link pointing to a ZIP of CSV files) provided in Step 4 of SKILL.md. - Boundary markers: The instructions do not specify explicit delimiters or "ignore instructions" warnings for the data being parsed from the CSV files.
- Capability inventory: The agent uses capabilities to download, unzip, and parse structured billing data to generate comparison tables for the user.
- Sanitization: No specific sanitization or validation of the CSV content is described, though the data originates from the user's own authenticated Azure billing environment via official service endpoints.
Audit Metadata