appinsights-instrumentation
Pass
Audited by Gen Agent Trust Hub on May 5, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- Indirect Prompt Injection Surface: The skill instructs the agent to analyze workspace source code to determine the appropriate instrumentation path. This represents a potential surface for indirect prompt injection.
- Ingestion points: Application source code files are read from the workspace as specified in
SKILL.mdto identify frameworks and hosting environments. - Boundary markers: No explicit delimiters or instructions to ignore embedded content are defined for this analysis step.
- Capability inventory: The skill references Azure CLI (
az) commands inscripts/appinsights.ps1to manage cloud resources and configuration, and modifies application code. - Sanitization: No specific sanitization or validation process is described for the content read from the workspace.
- Command Execution Reference: The skill provides a script (
scripts/appinsights.ps1) containing Azure CLI commands. These commands are intended to facilitate the creation and configuration of cloud resources, such as Log Analytics workspaces and Application Insights components, which involves making changes to the user's cloud environment. - External Package Integration: The documentation recommends the installation of official instrumentation libraries from the Microsoft Azure ecosystem via standard package managers like NPM and pip. These are well-known resources provided by the vendor for telemetry collection.
Audit Metadata