azure-cloud-shell
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill retrieves technical documentation from official Microsoft domains (learn.microsoft.com) and references an official MicrosoftDocs GitHub repository for tool installation guidelines.\n- [INDIRECT_PROMPT_INJECTION]: The skill possesses a vulnerability surface for indirect prompt injection by ingesting data from external documentation sources.\n
- Ingestion points: Documentation is retrieved via the mcp_microsoftdocs:microsoft_docs_fetch and fetch_webpage tools as defined in SKILL.md.\n
- Boundary markers: The skill does not implement delimiters or explicit instructions for the agent to ignore embedded commands within the fetched external content.\n
- Capability inventory: The skill utilizes file reading (read_file) and network-based documentation fetching capabilities.\n
- Sanitization: No sanitization, validation, or filtering mechanisms are specified for the external Markdown content before it is processed by the agent.
Audit Metadata