foundry-hosted-agent-validation

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • Command Line Execution: The skill requires the use of several command-line tools including az, azd, uv, and curl to perform environment setup, authentication, and service interaction. These are standard developer operations for managing Azure resources and local Python environments.
  • Execution of Local Code: The validation process involves running the sample's entry point (python main.py). This is a necessary step for verifying the agent's functionality in a local runtime environment.
  • Indirect Prompt Injection Surface: As this skill is intended to validate external code samples, it inherently processes untrusted data. The instructions include a capability inventory (e.g., subprocess.Popen, uv pip install) that could be influenced if a sample contains malicious instructions. This is mitigated by the fact that the skill is used for a specific, controlled validation purpose.
  • Cloud Deployment Operations: The skill utilizes azd deploy to push agents to Azure AI Foundry. It includes guidance on reusing existing infrastructure (like Azure Container Registry) to avoid unnecessary resource provisioning.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 09:52 PM