evaluate-azure-migration-assessment
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- Command Execution: The skill utilizes PowerShell and the Azure CLI (
az) to automate resource identification, trigger migration assessments, and monitor job status. These operations are performed using well-defined scripts that include error handling and follow security protocols for managing sensitive data. - Network Operations: It communicates with official Microsoft Azure endpoints (
management.azure.com) to execute API calls and retrieve assessment telemetry. These network interactions are necessary for the skill's core functionality and target trusted infrastructure. - Data Processing (Indirect Prompt Injection Consideration): The skill processes telemetry data retrieved from Azure APIs to generate readiness reports. While this introduces a potential surface for indirect prompt injection from external data, the skill employs structured output templates to present results, which serves as a mitigation measure.
- Authentication Security: The implementation demonstrates good security hygiene by acquiring short-lived ARM tokens, keeping them in memory during execution, and explicitly clearing them in finally blocks to prevent accidental exposure.
- Artifact Management: Temporary files used to store intermediate report data are isolated in unique directories within the system's temporary folder. The skill includes a dedicated cleanup process to remove these artifacts once the migration evaluation is complete.
Audit Metadata