azure-functions-create

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). Exclusion: the skill’s runtime ingests only provider/tool-generated template code and manifests from Azure MCP/tools (functions_template_get / functions_project_get / bestpractices and templates-manifest), not outsider-authored free text that an external user can post into a monitored queue/feed without the agent first selecting a specific item.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's fallback path explicitly fetches external templates at runtime (GET https://cdn.functions.azure.com/public/templates-manifest/manifest.json with a GitHub fallback https://github.com/Azure/azure-functions-templates/blob/dev/Functions.Templates/Template-Manifest/manifest.json) and also instructs runtime package retrieval such as "go get github.com/azure/azure-functions-golang-worker", which will download remote code that the agent uses to compose/execute generated projects.