azure-resource-visualizer

Pass

Audited by Gen Agent Trust Hub on Oct 3, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • Azure CLI Command Usage: The skill employs standard az CLI commands to perform resource discovery. This is a legitimate administrative function necessary for generating infrastructure visualizations.
  • Official Extension Dependency: The skill references the resource-graph Azure CLI extension. As this is an official component provided by Microsoft for the Azure ecosystem, it is classified as a trusted external resource.
  • Resource Data Processing: The skill ingests metadata from Azure resources, which constitutes a potential surface for indirect prompt injection if resource names or properties were to contain adversarial content. 1. Ingestion points: Results from az resource list and az graph query described in SKILL.md. 2. Boundary markers: The skill does not define specific delimiters for ingested resource metadata. 3. Capability inventory: Terminal command execution (az) and file system write operations. 4. Sanitization: The instructions explicitly require masking secrets and connection strings with placeholders.
  • Sensitive Information Handling: A core instruction of the skill is the proactive identification and masking of credentials, ensuring that the generated architecture diagrams do not expose sensitive environment secrets.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 3, 2026, 12:28 AM