azure-communication-chat-java
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [Trusted Dependencies]: The skill references official Azure SDK Maven dependencies (com.azure:azure-communication-chat). These are provided by Microsoft, a trusted organization.
- [Secret Management]: The skill correctly advises using environment variables (AZURE_COMMUNICATION_USER_TOKEN) for authentication rather than hardcoding credentials.
- [Indirect Prompt Injection Surface]: Since the skill is designed to read and process chat messages from external users, it introduces a surface for indirect prompt injection. Malicious instructions embedded in chat content could potentially influence the agent's behavior if not properly sanitized before processing.
Audit Metadata