dd-azure-integration

Pass

Audited by Gen Agent Trust Hub on Aug 27, 2026

Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes shell commands using terraform, the az CLI, and curl. These are used to discover Azure resources, manage infrastructure as code, and verify connectivity to the Datadog API.
  • [DATA_EXFILTRATION]: The skill reads sensitive configuration data from local .env and .env.local files to authenticate with Datadog and Azure. It communicates with official Datadog API endpoints (such as api.datadoghq.com and its regional variants) which are recognized as well-known service domains.
  • [DYNAMIC_EXECUTION]: The skill dynamically generates HashiCorp Configuration Language (HCL) templates for Terraform based on subscriptions and management groups selected by the user, and subsequently executes this code using terraform apply after a manual confirmation step.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources, including the Azure CLI (az account list) and Datadog API responses, to inform the integration setup. This ingestion is limited to specific operational data required for the primary task.
  • [PRIVILEGE_ESCALATION]: The skill performs operations that require high-level cloud permissions, such as creating Entra ID app registrations and assigning the Monitoring Reader role. It includes clear documentation and warnings for the user regarding the necessary administrative privileges required to complete the setup.
  • [EXTERNAL_DOWNLOADS]: The skill downloads and installs verified Terraform providers from the official HashiCorp registry, including azurerm, azuread, and the datadog provider, which is maintained by the skill's authoring organization.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 27, 2026, 09:05 PM
Security Audit — agent-trust-hub — dd-azure-integration