azure-ai-contentunderstanding-py
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [Standard SDK Usage]: The skill demonstrates the use of official Microsoft packages (
azure-ai-contentunderstandingandazure-identity) to perform multimodal content analysis. These dependencies are standard for interacting with Azure services. - [Safe Authentication Patterns]: The instructions explicitly recommend using
DefaultAzureCredentialover hardcoded API keys or connection strings. This is a recognized security best practice that leverages Azure's managed identity system and environment-based configuration. - [External Content Processing]: The skill is designed to ingest content from external URLs for analysis. This capability represents a potential surface for indirect prompt injection, as the extracted data (like markdown or transcripts) could contain instructions intended to influence downstream AI behavior. However, this is an inherent aspect of the skill's intended multimodal analysis functionality.
- [Resource Management]: The skill correctly advises the use of Python context managers (
withandasync withblocks) to ensure that network transports and credential caches are closed deterministically, reducing the risk of resource leaks.
Audit Metadata