skills/azure/azure-sdk-for-python/azsdk-common-pipeline-troubleshooting/Snyk

azsdk-common-pipeline-troubleshooting

Warn

Audited by Snyk on Jul 10, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 0.70). The required workflow calls azure-sdk-mcp:azsdk_analyze_pipeline to analyze a pipeline run (and, per SKILL.md, otherwise inspects Azure DevOps UI logs), which at runtime can ingest outsider-authored free-form pipeline log text into the agent’s LLM context via the MCP tool.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Jul 10, 2026, 09:48 AM

Issues

1

Security Audit — snyk — azsdk-common-pipeline-troubleshooting