azure-resource-lookup
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Command Generation: The skill generates
az graph querycommands to search for Azure resources across subscriptions. This dynamic command generation is a core feature for flexible resource discovery. - Indirect Prompt Injection: The skill displays resource metadata, such as tags and names, which are defined in the Azure environment. If these fields contain instructions, they could potentially influence the agent. This is a typical consideration for any tool that retrieves and presents external strings.
- Ingestion points: Resource names, tags, and property fields retrieved from Azure Resource Graph in
SKILL.mdandreferences/azure-resource-graph.md. - Boundary markers: The instructions specify output formatting using the
-o tableflag. - Capability inventory: Tools for listing subscriptions and resource groups, and the
extension_cli_generatetool for command creation. - Sanitization: The skill focuses on retrieval and display without explicit sanitization of the ingested metadata.
Audit Metadata