azure-resource-lookup

Pass

Audited by Gen Agent Trust Hub on Oct 3, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • Command Generation: The skill generates az graph query commands to search for Azure resources across subscriptions. This dynamic command generation is a core feature for flexible resource discovery.
  • Indirect Prompt Injection: The skill displays resource metadata, such as tags and names, which are defined in the Azure environment. If these fields contain instructions, they could potentially influence the agent. This is a typical consideration for any tool that retrieves and presents external strings.
  • Ingestion points: Resource names, tags, and property fields retrieved from Azure Resource Graph in SKILL.md and references/azure-resource-graph.md.
  • Boundary markers: The instructions specify output formatting using the -o table flag.
  • Capability inventory: Tools for listing subscriptions and resource groups, and the extension_cli_generate tool for command creation.
  • Sanitization: The skill focuses on retrieval and display without explicit sanitization of the ingested metadata.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 3, 2026, 12:28 AM