azure-resource-visualizer
Pass
Audited by Gen Agent Trust Hub on Apr 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFEPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the Azure CLI (az) to perform resource discovery and detailed configuration analysis of Azure resource groups.
- [EXTERNAL_DOWNLOADS]: The instructions prompt the installation of the official 'resource-graph' Azure CLI extension to enable cross-subscription querying capabilities.
- [CREDENTIALS_UNSAFE]: The workflow explicitly directs the agent to capture sensitive configuration details, including connection strings and Key Vault references, which brings these secrets into the agent's context.
- [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface as it ingests untrusted metadata (resource names and properties) from the Azure environment to generate diagrams and documentation without sanitization or boundary markers. Additionally, the metadata claims 'Microsoft' as the author while the source context indicates 'kinnekate-hub', which is a minor discrepancy.
Audit Metadata