azure-business-process-tracking
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches documentation from Microsoft's official Learn platform and refers to an installation guide on a Microsoft-owned GitHub repository.
- Evidence: References to
https://learn.microsoft.com/en-us/azure/business-process-tracking/set-up-continuous-integration-deploymentandhttps://github.com/MicrosoftDocs/mcp/blob/main/README.md. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates fetching external web content into the agent context, creating a surface for indirect prompt injection from the retrieved data.
- Ingestion points: Instructions to use
mcp_microsoftdocs:microsoft_docs_fetchorfetch_webpagein SKILL.md. - Boundary markers: Absent.
- Capability inventory:
mcp_microsoftdocs:microsoft_docs_fetchandfetch_webpagetools. - Sanitization: No explicit sanitization logic for retrieved content is defined within the skill.
Audit Metadata