work-iterations

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [Data Interaction]: The skill interacts with Azure DevOps data to list, create, and assign iterations. This represents a standard integration for project management tasks.
  • [Indirect Prompt Injection Surface]: The skill processes project and iteration data from an external source, which is a common pattern for agent skills.
  • Ingestion points: Data is retrieved from Azure DevOps via the work tool (e.g., list_iterations).
  • Boundary markers: The instructions do not define specific delimiters for iteration names or project data.
  • Capability inventory: The skill has the ability to write data to Azure DevOps using work_iteration_write (actions: create, assign).
  • Sanitization: The skill relies on the underlying tool implementation and agent guardrails to handle retrieved data safely.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 10:56 AM
Security Audit — agent-trust-hub — work-iterations