azure-mgmt-fabric-py
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [Indirect Prompt Injection Surface]: The skill processes external inputs such as environment variables (
AZURE_SUBSCRIPTION_ID,AZURE_RESOURCE_GROUP) and user-defined capacity names to perform management tasks. While this is necessary for its functionality, it represents a standard data ingestion surface. - Ingestion points: Sensitive parameters are retrieved from the environment (
os.environ) inSKILL.md. - Boundary markers: The skill relies on standard variable interpolation within Python code blocks to delimit user-provided data.
- Capability inventory: The skill utilizes the
azure-mgmt-fabricSDK to perform network operations (CRUD on Fabric capacities) and manages authentication viaazure-identity. - Sanitization: Validation and sanitization are managed by the official Azure SDK and underlying REST API endpoints.
- [Authentication Best Practices]: The skill actively promotes secure coding patterns by recommending
DefaultAzureCredentialover hardcoded API keys and enforcing the use of context managers to ensure proper resource cleanup. - [Trusted Dependencies]: The skill utilizes official Microsoft packages (
azure-mgmt-fabric,azure-identity), which are recognized as verified resources from a trusted vendor.
Audit Metadata