azure-messaging

Pass

Audited by Gen Agent Trust Hub on Apr 29, 2026

Risk Level: SAFE
Full Analysis
  • Authentication Best Practices: The skill strongly recommends the use of Managed Identity and Azure RBAC for production environments, which is a key security measure to avoid hardcoded credentials and secret rotation overhead.
  • Secure Configuration Guidance: It provides clear instructions on configuring SDKs securely, including port management (e.g., using WebSockets over port 443 when standard AMQP ports are blocked) and verifying connection integrity.
  • Diagnostic Tool Integration: The skill integrates with platform-specific tools to query diagnostic logs and service health. This capability is essential for troubleshooting but requires appropriate user permissions and adherence to data handling policies.
  • Indirect Prompt Injection Surface: The skill's functionality involves processing diagnostic logs and documentation, which represents a potential surface for indirect prompt injection.
  • Ingestion points: Diagnostic data enters the context via mcp_azure_mcp_monitor (log queries) and mcp_azure_mcp_documentation (documentation search).
  • Boundary markers: Not explicitly defined in the troubleshooting guides; the skill relies on the underlying platform's handling of tool outputs.
  • Capability inventory: The skill utilizes resource management tools such as mcp_azure_mcp_eventhubs and mcp_azure_mcp_servicebus for operational tasks.
  • Sanitization: Standard platform-level sanitization is expected for external tool outputs.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 29, 2026, 09:13 AM