azure-functions-health-status
Pass
Audited by Gen Agent Trust Hub on Jun 30, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes Azure CLI commands and local diagnostic scripts (.ps1 and .sh) to investigate resource health. While the PowerShell implementation uses Invoke-Expression to capture command output, the inputs are scoped to Azure resource metadata.
- [EXTERNAL_DOWNLOADS]: Configures the Azure CLI environment to automatically install official extensions like 'resource-graph' from Microsoft's verified registries to ensure necessary diagnostic tools are available.
- [DATA_EXFILTRATION]: Communicates with official Azure management and telemetry endpoints (management.azure.com and loganalytics.io) to retrieve environment status, metrics, and activity logs for analysis.
- [PROMPT_INJECTION]: Processes external data from Application Insights and Log Analytics, which presents a surface for indirect prompt injection through logs (e.g., malicious trace messages). The skill mitigates this risk by providing specific instructions for the agent to redact secrets and provide high-level findings rather than raw data dumps.
Audit Metadata