appinsights-instrumentation
Pass
Audited by Gen Agent Trust Hub on Apr 14, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides Azure CLI commands in scripts/appinsights.ps1 to provision Log Analytics workspaces, create Application Insights components, and configure environment variables in Azure App Services, Container Apps, and Function Apps. These are standard management operations.
- [EXTERNAL_DOWNLOADS]: The skill guides the user to install official monitoring packages from trusted registries using dotnet add package, npm install, and pip install. The packages referenced are standard Azure SDK components from a well-known vendor.
- [DATA_EXFILTRATION]: While the skill retrieves sensitive information like Application Insights connection strings, it does so to configure the application's environment settings within the same Azure infrastructure. No unauthorized external data transmission patterns were identified.
- [PROMPT_INJECTION]: The skill involves reading application source code and infrastructure-as-code templates to automate configuration. While this exposes a surface for indirect prompt injection from workspace files, it is a necessary part of the skill's primary function and no malicious exploitation patterns were found.
Audit Metadata