azure-functions-inventory
Pass
Audited by Gen Agent Trust Hub on Jun 30, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses bundled PowerShell and Bash scripts to execute Azure CLI (
az) commands. This is the intended functionality for gathering resource metadata and configuration. - [CREDENTIALS_UNSAFE]: The scripts include robust redaction logic that identifies and masks sensitive settings (e.g.,
CONNECTION,Storage,KEY,SECRET,PASSWORD) to prevent the exposure of credentials in the agent's output. - [DATA_EXFILTRATION]: All network operations are performed through the official Azure CLI or via
az restcalls to the standard Azure Management endpoint (management.azure.com). There are no requests made to unauthorized external domains. - [EXTERNAL_DOWNLOADS]: The skill automatically installs the official Azure
resource-graphextension if it is missing. This is a standard and trusted extension provided by the vendor (Microsoft/Azure).
Audit Metadata