azure-containerregistry-py
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Recommends the installation of the
azure-containerregistrylibrary, which is a well-known package from a trusted organization (Microsoft). - [COMMAND_EXECUTION]: Includes Python code snippets that write binary data from registry blobs to the local file system (e.g.,
layer.tar.gz). - [DATA_EXFILTRATION]: Performs legitimate network operations to Azure Container Registry endpoints to manage repositories, manifests, and tags.
- [INDIRECT_PROMPT_INJECTION]: The skill interacts with external data (Azure Container Registry metadata such as repository names and tags). While this presents a theoretical surface for indirect prompt injection if an agent blindly trusts this data, the skill is a legitimate tool documentation for a well-known service.
Audit Metadata