wiki-pages

Pass

Audited by Gen Agent Trust Hub on Sep 30, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill employs curl to interact with Azure DevOps REST APIs and git for comparing file differences.\n
  • Tool Usage: curl is used for GET/PUT/POST requests to Wiki and Search APIs.\n
  • Tool Usage: git diff is used to show changes to the user before updating pages.\n
  • Tool Usage: jq is used for JSON processing and URI encoding.\n- [EXTERNAL_DOWNLOADS]: Data is retrieved from official Microsoft Azure DevOps domains.\n
  • Domains: dev.azure.com and almsearch.dev.azure.com are used for all API interactions.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes external content from Azure DevOps Wiki pages, creating a vulnerability surface for injected instructions.\n
  • Ingestion points: REST API responses from wiki page read calls.\n
  • Boundary markers: The skill instructions require the agent to present all content or diffs to the user for confirmation before executing writes.\n
  • Capability inventory: Includes curl for authenticated write operations to the wiki.\n
  • Sanitization: Content is escaped into JSON objects using jq before transmission.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 30, 2026, 04:39 AM