azure-cost-management-app
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied parameters which are then entered into a web interface during an authenticated session.
- Ingestion points: Enrollment Number and history depth parameters provided by the user (defined in the 'Parameters to Collect from User' section of SKILL.md).
- Boundary markers: Absent; the instructions do not specify delimiters for user-provided strings.
- Capability inventory: UI interaction tools including
computer(type, click) andform_input(defined in the 'Tools' section of SKILL.md). - Sanitization: Absent; the skill relies on the target web application's native validation.
- [COMMAND_EXECUTION]: The skill utilizes browser automation tools to interact with the Power BI Service UI, including navigating to specific management pages and filling in form data. This is standard behavior for the intended purpose of browser-based application deployment.
- [EXTERNAL_DOWNLOADS]: The skill configures a connection to an official Microsoft-owned blob storage endpoint (
ccmstorageprod.blob.core.windows.net) as required for the application's functionality.
Audit Metadata