add-azure-mcp-tools
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- [Secure Development Guidelines]: The skill documentation establishes a rigorous framework for tool development with a strong focus on security gates and checklists.
- [Input Validation Requirements]: Developers are instructed to implement resource-specific validation using deterministic checks (length, allowed characters, and format) to prevent input abuse and injection attacks. It explicitly references official Azure naming rules as the source of truth.
- [Logging and Data Protection]: The instructions mandate secure logging practices, specifically forbidding the logging of raw option objects that might contain secrets or PII. It also requires that error messages returned to users be actionable but non-revealing to prevent information disclosure.
- [Endpoint Security]: The guidelines require the use of specialized validation helpers to guard against SSRF and unauthorized domain access, distinguishing between Azure service endpoints, known external hosts, and arbitrary user-controlled targets.
- [Trusted Resource Usage]: The skill references official Microsoft and Azure development resources, such as documentation on
learn.microsoft.comand theAzure/azure-sdk-assetsrepository, for standard integration tasks.
Audit Metadata