az
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the official Azure Command Line Interface using the
brew install azure-clicommand. This is a well-known tool from a reputable source. - [COMMAND_EXECUTION]: The skill facilitates the execution of the
azbinary for cloud resource management, including commands for authentication, resource groups, virtual machines, and Kubernetes clusters. - [PROMPT_INJECTION]: The skill documentation includes examples where user-provided inputs like resource names and file paths are used as command arguments, creating a surface for indirect prompt injection.
- Ingestion points: User-supplied strings for resource identifiers (
--name,--resource-group) and local file paths (--src-path,--file) in theSKILL.mdexamples. - Boundary markers: None provided in the command templates to delimit user input from shell arguments.
- Capability inventory: Includes wide-ranging management capabilities such as resource deletion, VM management, and Kubernetes credential retrieval via the
azCLI as seen inSKILL.md. - Sanitization: The instructions do not specify input validation or sanitization for these parameters.
Audit Metadata