The Agent Skills Directory

[Indirect Prompt Injection Surface]: The skill ingests data from Azure resource metadata, Resource Graph query results, and azqr scan artifacts (Excel reports) as described in references/azure-quick-review.md. This represents a surface for indirect prompt injection. While ingestion is necessary for auditing, there are no explicit boundary markers or sanitization instructions provided for this data. The skill's capability inventory includes Azure MCP tools and CLI command generation based on these inputs.
[Cloud Configuration Access]: The skill utilizes MCP tools to list and retrieve metadata for Azure Key Vault items (secrets, keys, certificates). As documented in references/azure-keyvault-expiration-audit.md, this is limited to expiration and status metadata for compliance reporting. The skill incorporates strong authentication guidance, favoring Managed Identities over long-lived credentials.
[Command Template Generation]: The skill provides templates for Azure CLI and Bicep in references/azqr-remediation-patterns.md. These are intended for user-guided remediation of compliance findings. The use of standard CLI extensions and well-known library packages is consistent with official Microsoft developer practices.

azure-compliance