analyze-readiness-at-scale
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [Credential Management]: The skill utilizes the Azure CLI to retrieve a temporary authentication token for accessing the Azure Resource Manager API. The skill includes instructions to ensure this token is cleared from memory after use and never persisted, which aligns with security best practices for handling session credentials.
- [Network Operations]: The skill performs authorized requests to official Microsoft services (management.azure.com) to retrieve assessment data. These operations are restricted to the vendor's own infrastructure required for the migration assessment workflow.
- [Dynamic Query Generation]: KQL queries are constructed using string interpolation with subscription and resource group identifiers. The skill specifies that single quotes must be escaped within these parameters to prevent potential query injection, demonstrating a proactive approach to input validation.
- [External Data Processing]: The skill ingests data from Azure Resource Graph query results and Microsoft Learn documentation. While processing external content presents a surface for indirect prompt injection, the skill implements specific extraction logic to isolate technical descriptions and recommendations, reducing the likelihood of processing extraneous instructions.
Audit Metadata