azure-resource-visualizer
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Azure CLI Command Usage: The skill employs standard
azCLI commands to perform resource discovery. This is a legitimate administrative function necessary for generating infrastructure visualizations. - Official Extension Dependency: The skill references the
resource-graphAzure CLI extension. As this is an official component provided by Microsoft for the Azure ecosystem, it is classified as a trusted external resource. - Resource Data Processing: The skill ingests metadata from Azure resources, which constitutes a potential surface for indirect prompt injection if resource names or properties were to contain adversarial content. 1. Ingestion points: Results from
az resource listandaz graph querydescribed in SKILL.md. 2. Boundary markers: The skill does not define specific delimiters for ingested resource metadata. 3. Capability inventory: Terminal command execution (az) and file system write operations. 4. Sanitization: The instructions explicitly require masking secrets and connection strings with placeholders. - Sensitive Information Handling: A core instruction of the skill is the proactive identification and masking of credentials, ensuring that the generated architecture diagrams do not expose sensitive environment secrets.
Audit Metadata