azure-cognitive-search
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches documentation content from official Microsoft domains (learn.microsoft.com). These references are used to provide the agent with up-to-date technical information.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process content from external web pages, which represents a potential attack surface.
- Ingestion points: Remote documentation retrieved via the
mcp_microsoftdocs:microsoft_docs_fetchtool or thefetch_webpagetool. - Boundary markers: The skill does not explicitly define delimiters or instructions for the agent to ignore potential instructions embedded within the fetched documentation.
- Capability inventory: The skill itself contains no scripts, executable code, or subprocess calls.
- Sanitization: No specific sanitization or filtering logic is described for the retrieved external content.
Audit Metadata