azure-storage-file-datalake-py
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- Secure Authentication Patterns: The skill documentation prioritizes the use of
DefaultAzureCredential, which is a recommended security practice for Azure SDKs. This approach avoids the need for hardcoded credentials or connection strings in code, leveraging environment-based authentication or managed identities instead. - Resource Lifecycle Management: The provided code samples consistently use context managers (
withandasync withstatements). This ensures that network connections and authentication tokens are properly disposed of, reducing the risk of resource exhaustion or leaked session information. - Indirect Prompt Injection Surface: As the skill provides capabilities to download and read file content from a cloud storage service, it creates a surface for indirect prompt injection. If an agent uses this skill to read data from a source that could be modified by an untrusted third party, the retrieved content should be treated as untrusted. This is an inherent property of data-retrieval skills and is mitigated by following standard sanitization practices when the agent processes the resulting data.
- Official Dependency Usage: The skill utilizes standard, well-known Python packages from a trusted vendor (
azure-storage-file-datalakeandazure-identity). The installation instructions and documentation links point to official Microsoft resources.
Audit Metadata