azure-messaging
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFE
Full Analysis
- Authentication Best Practices: The skill strongly recommends the use of Managed Identity and Azure RBAC for production environments, which is a key security measure to avoid hardcoded credentials and secret rotation overhead.
- Secure Configuration Guidance: It provides clear instructions on configuring SDKs securely, including port management (e.g., using WebSockets over port 443 when standard AMQP ports are blocked) and verifying connection integrity.
- Diagnostic Tool Integration: The skill integrates with platform-specific tools to query diagnostic logs and service health. This capability is essential for troubleshooting but requires appropriate user permissions and adherence to data handling policies.
- Indirect Prompt Injection Surface: The skill's functionality involves processing diagnostic logs and documentation, which represents a potential surface for indirect prompt injection.
- Ingestion points: Diagnostic data enters the context via
mcp_azure_mcp_monitor(log queries) andmcp_azure_mcp_documentation(documentation search). - Boundary markers: Not explicitly defined in the troubleshooting guides; the skill relies on the underlying platform's handling of tool outputs.
- Capability inventory: The skill utilizes resource management tools such as
mcp_azure_mcp_eventhubsandmcp_azure_mcp_servicebusfor operational tasks. - Sanitization: Standard platform-level sanitization is expected for external tool outputs.
Audit Metadata