azure-business-process-tracking

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches documentation from Microsoft's official Learn platform and refers to an installation guide on a Microsoft-owned GitHub repository.
  • Evidence: References to https://learn.microsoft.com/en-us/azure/business-process-tracking/set-up-continuous-integration-deployment and https://github.com/MicrosoftDocs/mcp/blob/main/README.md.
  • [INDIRECT_PROMPT_INJECTION]: The skill facilitates fetching external web content into the agent context, creating a surface for indirect prompt injection from the retrieved data.
  • Ingestion points: Instructions to use mcp_microsoftdocs:microsoft_docs_fetch or fetch_webpage in SKILL.md.
  • Boundary markers: Absent.
  • Capability inventory: mcp_microsoftdocs:microsoft_docs_fetch and fetch_webpage tools.
  • Sanitization: No explicit sanitization logic for retrieved content is defined within the skill.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 03:21 PM