azure-resource-lookup
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- Command Execution: The skill generates and executes shell commands using the Azure CLI (
az graph query). - Evidence: Use of
extension_cli_generateto buildazcommands inSKILL.md. - Context: This is the primary mechanism for the skill's functionality. The commands are intended for read-only resource discovery.
- Dynamic Execution: The skill dynamically assembles CLI commands at runtime based on user intent.
- Evidence: The workflow in
SKILL.mddescribes usingextension_cli_generateto build a command string that is subsequently executed. - Context: This allows the skill to handle a wide variety of resource types without predefined templates for every case.
- Indirect Prompt Injection: The skill processes natural language input to generate structured queries, which represents a potential attack surface.
- Ingestion points: User requests are processed by
extension_cli_generateto build CLI commands. - Boundary markers: The skill does not explicitly define delimiters for untrusted input within the generated command strings.
- Capability inventory: The skill utilizes
az graph queryto retrieve resource metadata across Azure subscriptions. - Sanitization: Safety relies on the underlying agent's command generation logic and the read-only nature of the Azure Resource Graph service.
- External Extension Requirement: The skill references an external Azure CLI extension.
- Evidence:
az extension add --name resource-graphinSKILL.md. - Context: The extension is an official component provided by the platform vendor for Resource Graph queries.
Audit Metadata