azure-advisor
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- Confirmation Safeguards: The skill includes a specific safety section requiring user confirmation before the agent performs any recommendation updates, providing human-in-the-loop control for environment changes.
- Indirect Prompt Injection Surface: The skill processes output from Azure Advisor tools which could technically include user-controlled resource metadata. The mandatory confirmation step for write operations serves as a functional mitigation for this surface.
- Official Tool Usage: All tools referenced are official Microsoft Azure Advisor capabilities, and the instructions focus on maintaining correct scope and identifiers throughout the management workflow.
Audit Metadata