The Agent Skills Directory

Indirect Prompt Injection Surface: The skill ingests data from external sources such as Azure resource metadata (names, tags) and compliance scan results from tools like azqr. This ingestion point is an inherent part of its audit capability. The skill manages this surface by directing the agent to use structured reporting formats. Capabilities involved include executing Azure CLI commands and MCP tools to fetch and process this data. The skill operates within the scope of authorized cloud management tools and follows established patterns for cloud auditing.
Dynamic Command Generation: The skill uses intent-based patterns to generate Azure CLI commands for Resource Graph queries using the extension_cli_generate tool. This allows for dynamic auditing based on user requests, relying on the agent's tool-calling logic to assemble valid commands for the target environment. This is a standard administrative capability provided by the platform for flexible resource management.

azure-compliance