dd-azure-integration
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands using
terraform, theazCLI, andcurl. These are used to discover Azure resources, manage infrastructure as code, and verify connectivity to the Datadog API. - [DATA_EXFILTRATION]: The skill reads sensitive configuration data from local
.envand.env.localfiles to authenticate with Datadog and Azure. It communicates with official Datadog API endpoints (such asapi.datadoghq.comand its regional variants) which are recognized as well-known service domains. - [DYNAMIC_EXECUTION]: The skill dynamically generates HashiCorp Configuration Language (HCL) templates for Terraform based on subscriptions and management groups selected by the user, and subsequently executes this code using
terraform applyafter a manual confirmation step. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources, including the Azure CLI (
az account list) and Datadog API responses, to inform the integration setup. This ingestion is limited to specific operational data required for the primary task. - [PRIVILEGE_ESCALATION]: The skill performs operations that require high-level cloud permissions, such as creating Entra ID app registrations and assigning the
Monitoring Readerrole. It includes clear documentation and warnings for the user regarding the necessary administrative privileges required to complete the setup. - [EXTERNAL_DOWNLOADS]: The skill downloads and installs verified Terraform providers from the official HashiCorp registry, including
azurerm,azuread, and thedatadogprovider, which is maintained by the skill's authoring organization.
Audit Metadata