evaluate-azure-migration-assessment

Pass

Audited by Gen Agent Trust Hub on Sep 28, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • Command Execution: The skill utilizes PowerShell and the Azure CLI (az) to automate resource identification, trigger migration assessments, and monitor job status. These operations are performed using well-defined scripts that include error handling and follow security protocols for managing sensitive data.
  • Network Operations: It communicates with official Microsoft Azure endpoints (management.azure.com) to execute API calls and retrieve assessment telemetry. These network interactions are necessary for the skill's core functionality and target trusted infrastructure.
  • Data Processing (Indirect Prompt Injection Consideration): The skill processes telemetry data retrieved from Azure APIs to generate readiness reports. While this introduces a potential surface for indirect prompt injection from external data, the skill employs structured output templates to present results, which serves as a mitigation measure.
  • Authentication Security: The implementation demonstrates good security hygiene by acquiring short-lived ARM tokens, keeping them in memory during execution, and explicitly clearing them in finally blocks to prevent accidental exposure.
  • Artifact Management: Temporary files used to store intermediate report data are isolated in unique directories within the system's temporary folder. The skill includes a dedicated cleanup process to remove these artifacts once the migration evaluation is complete.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 28, 2026, 08:20 PM