appinsights-instrumentation

Pass

Audited by Gen Agent Trust Hub on May 5, 2026

Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • Indirect Prompt Injection Surface: The skill instructs the agent to analyze workspace source code to determine the appropriate instrumentation path. This represents a potential surface for indirect prompt injection.
  • Ingestion points: Application source code files are read from the workspace as specified in SKILL.md to identify frameworks and hosting environments.
  • Boundary markers: No explicit delimiters or instructions to ignore embedded content are defined for this analysis step.
  • Capability inventory: The skill references Azure CLI (az) commands in scripts/appinsights.ps1 to manage cloud resources and configuration, and modifies application code.
  • Sanitization: No specific sanitization or validation process is described for the content read from the workspace.
  • Command Execution Reference: The skill provides a script (scripts/appinsights.ps1) containing Azure CLI commands. These commands are intended to facilitate the creation and configuration of cloud resources, such as Log Analytics workspaces and Application Insights components, which involves making changes to the user's cloud environment.
  • External Package Integration: The documentation recommends the installation of official instrumentation libraries from the Microsoft Azure ecosystem via standard package managers like NPM and pip. These are well-known resources provided by the vendor for telemetry collection.
Audit Metadata
Risk Level
SAFE
Analyzed
May 5, 2026, 10:06 PM