azurebackup-telemetry-report
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- Indirect Prompt Injection Considerations: The skill processes telemetry data, such as exception messages and stack traces, along with Git repository metadata. Since these sources can be influenced by external factors or untrusted inputs, they represent a potential surface where malformed data could attempt to influence the agent's output during the report generation process.
- Ingestion points: Untrusted data enters the agent's context through the
getAzureMcpEvents_ToolCallsKusto function andgit logmetadata as specified in the skill's procedures. - Capability inventory: The skill can execute shell commands via
gitand generate HTML files to produce reports. - Sanitization: The instructions do not define specific sanitization or escaping protocols for the telemetry strings before they are incorporated into the report template.
- Boundary markers: The skill does not currently employ explicit boundary markers or "ignore instructions" warnings when processing the telemetry and Git metadata.
- System Command Execution: The skill utilizes standard command-line utilities, including
gitand PowerShell-compatible tools likeSelect-StringandMeasure-Object. These are used appropriately within the skill's workflow to aggregate repository metrics and analyze code history. - External Resource Access: The skill connects to internal Kusto clusters and official GitHub repositories to retrieve telemetry data and report templates. These network operations are consistent with the skill's stated purpose and target the vendor's established infrastructure.
Audit Metadata