wiki-pages
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill employs
curlto interact with Azure DevOps REST APIs andgitfor comparing file differences.\n - Tool Usage:
curlis used for GET/PUT/POST requests to Wiki and Search APIs.\n - Tool Usage:
git diffis used to show changes to the user before updating pages.\n - Tool Usage:
jqis used for JSON processing and URI encoding.\n- [EXTERNAL_DOWNLOADS]: Data is retrieved from official Microsoft Azure DevOps domains.\n - Domains:
dev.azure.comandalmsearch.dev.azure.comare used for all API interactions.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes external content from Azure DevOps Wiki pages, creating a vulnerability surface for injected instructions.\n - Ingestion points: REST API responses from wiki page read calls.\n
- Boundary markers: The skill instructions require the agent to present all content or diffs to the user for confirmation before executing writes.\n
- Capability inventory: Includes
curlfor authenticated write operations to the wiki.\n - Sanitization: Content is escaped into JSON objects using
jqbefore transmission.
Audit Metadata