azure-ai-openai-dotnet
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [External Package Dependencies]: The skill provides instructions to install standard .NET packages, including
Azure.AI.OpenAI,OpenAI,Azure.Identity, andAzure.Search.Documents. These packages are sourced from NuGet, the official package registry for the .NET ecosystem, and are maintained by Microsoft. - [Indirect Prompt Injection Surface]: The skill demonstrates how to build applications that ingest data from external sources, such as Azure AI Search (RAG), and process structured AI outputs. This is an inherent characteristic of AI integration tools; however, the skill mitigates risk by including best practices that advise developers to validate tool call arguments before execution.
- [Secure Credential Management]: The documentation follows secure practices by using environment variables for configuration placeholders and explicitly recommending the use of
DefaultAzureCredential(Entra ID) for production environments instead of hardcoded API keys.
Audit Metadata