dd-azure-integration
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes functionality to fetch related instruction sets from the official datadog-labs GitHub repository. This remote retrieval is restricted to the skill author's own verified repository and is used for modularizing integration steps.
- [COMMAND_EXECUTION]: Orchestrates the use of standard system utilities like
curl,tar, andterraform, as well as theazCLI. These operations are essential for the skill's stated purpose of infrastructure provisioning and service registration. - [INDIRECT_PROMPT_INJECTION]: The skill processes outputs from the Azure CLI and Datadog API. It implements defensive patterns by requiring the agent to pause for manual user confirmation before applying infrastructure changes and includes explicit error-handling logic for unexpected API responses.
- [DATA_EXPOSURE]: Implements secure credential loading from local environment files. It specifically uses a piped-stdin pattern with
curl -H @-to ensure that Datadog API and Application keys are never exposed as command-line arguments in the system's process list.
Audit Metadata