azure-functions-doctor
Pass
Audited by Gen Agent Trust Hub on Aug 9, 2026
Risk Level: SAFE
Full Analysis
- Security Diagnostic Functionality: The skill instructs the agent to perform deep semantic analysis of local workspaces to identify security risks such as hardcoded secrets, malicious import-time side effects, and persistence mechanisms. These checks are defensive in nature and serve to audit the user's codebase.
- Trusted Vendor Integration: The skill references official Azure ecosystem components, including the
@azure/functions-skillsNPM package and Azure CLI. These are documented as standard tools for CI/CD integration and resource metadata resolution. - Read-Only Operation: Instructions explicitly forbid modifying project files, ensuring that the analysis process does not inadvertently alter the user's environment or introduce changes.
- Analysis Input Surface: As a diagnostic tool, the skill reads external project files and dependency manifests. While this constitutes an ingestion point for indirect prompt injection (where malicious instructions could be embedded in the code being analyzed), the risk is mitigated by the skill's restricted capabilities—limited to file reading and structured JSON output—and the absence of network-based exfiltration or code execution commands.
Audit Metadata