azure-attestation
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill is designed to fetch documentation content from official Microsoft domains (learn.microsoft.com) using documentation tools.
- [EXTERNAL_DOWNLOADS]: The skill provides a link to the official MicrosoftDocs GitHub repository for tool installation guidance.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests external content from documentation URLs, creating a surface for potential indirect prompt injection.
- Ingestion points: The skill uses tools to retrieve content from multiple learn.microsoft.com URLs specified in the Category Index.
- Boundary markers: There are no explicit instructions or delimiters to isolate the fetched content from the agent's core instructions.
- Capability inventory: The skill definition is limited to documentation retrieval and does not include tools for file system access, command execution, or arbitrary network requests.
- Sanitization: No sanitization or validation logic for the external documentation content is described in the skill.
Audit Metadata