azure-chaos-studio
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and fetches documentation from learn.microsoft.com, which is an official domain for Microsoft documentation.- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to fetch remote content, creating an attack surface for indirect prompt injection.
- Ingestion points: Remote content fetched via microsoft_docs_fetch or fetch_webpage as described in SKILL.md.
- Boundary markers: Absent. No instructions are provided to the agent to delimit or ignore instructions within the fetched content.
- Capability inventory: The agent uses retrieved information from SKILL.md to guide Chaos Studio development, including CLI management and configuration.
- Sanitization: Absent. No filtering or escaping is applied to the fetched remote content.
Audit Metadata