work-iterations
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [Data Interaction]: The skill interacts with Azure DevOps data to list, create, and assign iterations. This represents a standard integration for project management tasks.
- [Indirect Prompt Injection Surface]: The skill processes project and iteration data from an external source, which is a common pattern for agent skills.
- Ingestion points: Data is retrieved from Azure DevOps via the
worktool (e.g.,list_iterations). - Boundary markers: The instructions do not define specific delimiters for iteration names or project data.
- Capability inventory: The skill has the ability to write data to Azure DevOps using
work_iteration_write(actions:create,assign). - Sanitization: The skill relies on the underlying tool implementation and agent guardrails to handle retrieved data safely.
Audit Metadata