dd-azure-log-forwarding
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads an official Datadog installer script from the 'DataDog/integrations-management' GitHub repository. This download is secured by pinning to a specific commit hash (bb854e5) and verifying the file integrity using a SHA-256 checksum before execution. It also includes logic to fetch associated agent skills from the author's official 'datadog-labs' repository.
- [REMOTE_CODE_EXECUTION]: The skill executes a downloaded Python zipapp ('azure_logging_install.pyz') to perform the Azure configuration. This execution is considered safe as the source is a trusted vendor repository and the script's integrity is strictly verified by the skill before it runs. The skill also explicitly uses a Python-based filter to redact sensitive information (like API keys and storage connection strings) from the command output.
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external sources, including Azure subscription lists via the 'az' CLI and log events from the Datadog Logs API. It mitigates injection risks by using structured JSON parsing ('json.load') and by wrapping search queries in 'json.dumps' rather than using raw string interpolation, ensuring external data is treated as data rather than executable instructions.
Audit Metadata