add-mcscopilot
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- Indirect Prompt Injection Surface: The skill involves processing responses from external Copilot Studio agents. Ingesting data from external sources can introduce security considerations if the content is designed to influence the agent's behavior or the application's logic.
- Ingestion points: External agent responses are retrieved via
result.responsesas described inSKILL.md. - Boundary markers: The provided implementation patterns do not include explicit delimiters or 'ignore' instructions for the external content.
- Capability inventory: The skill enables the agent to interact with the environment via the
Bashtool and modifies the application source code usingWriteandEdittools. - Sanitization: The instructions demonstrate basic JSON parsing of responses but do not detail specific validation or sanitization of the content before use.
Audit Metadata