add-mcscopilot

Pass

Audited by Gen Agent Trust Hub on Nov 9, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • Indirect Prompt Injection Surface: The skill involves processing responses from external Copilot Studio agents. Ingesting data from external sources can introduce security considerations if the content is designed to influence the agent's behavior or the application's logic.
  • Ingestion points: External agent responses are retrieved via result.responses as described in SKILL.md.
  • Boundary markers: The provided implementation patterns do not include explicit delimiters or 'ignore' instructions for the external content.
  • Capability inventory: The skill enables the agent to interact with the environment via the Bash tool and modifies the application source code using Write and Edit tools.
  • Sanitization: The instructions demonstrate basic JSON parsing of responses but do not detail specific validation or sanitization of the content before use.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 9, 2026, 08:40 AM