foundry-hosted-agent-validation
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Command Line Execution: The skill requires the use of several command-line tools including
az,azd,uv, andcurlto perform environment setup, authentication, and service interaction. These are standard developer operations for managing Azure resources and local Python environments. - Execution of Local Code: The validation process involves running the sample's entry point (
python main.py). This is a necessary step for verifying the agent's functionality in a local runtime environment. - Indirect Prompt Injection Surface: As this skill is intended to validate external code samples, it inherently processes untrusted data. The instructions include a capability inventory (e.g.,
subprocess.Popen,uv pip install) that could be influenced if a sample contains malicious instructions. This is mitigated by the fact that the skill is used for a specific, controlled validation purpose. - Cloud Deployment Operations: The skill utilizes
azd deployto push agents to Azure AI Foundry. It includes guidance on reusing existing infrastructure (like Azure Container Registry) to avoid unnecessary resource provisioning.
Audit Metadata