azure-storage-file-datalake-py

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • Secure Authentication Patterns: The skill documentation prioritizes the use of DefaultAzureCredential, which is a recommended security practice for Azure SDKs. This approach avoids the need for hardcoded credentials or connection strings in code, leveraging environment-based authentication or managed identities instead.
  • Resource Lifecycle Management: The provided code samples consistently use context managers (with and async with statements). This ensures that network connections and authentication tokens are properly disposed of, reducing the risk of resource exhaustion or leaked session information.
  • Indirect Prompt Injection Surface: As the skill provides capabilities to download and read file content from a cloud storage service, it creates a surface for indirect prompt injection. If an agent uses this skill to read data from a source that could be modified by an untrusted third party, the retrieved content should be treated as untrusted. This is an inherent property of data-retrieval skills and is mitigated by following standard sanitization practices when the agent processes the resulting data.
  • Official Dependency Usage: The skill utilizes standard, well-known Python packages from a trusted vendor (azure-storage-file-datalake and azure-identity). The installation instructions and documentation links point to official Microsoft resources.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 02:51 PM
Security Audit — agent-trust-hub — azure-storage-file-datalake-py