azure-content-understanding
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for the agent to recommend the installation of the
mcp_microsoftdocstool from the official MicrosoftDocs GitHub repository (https://github.com/MicrosoftDocs/mcp/blob/main/README.md). This is a legitimate reference to the vendor's own repository for required tooling. - [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to fetch documentation from
learn.microsoft.comusing specialized tools. This represents a data ingestion surface where external content is brought into the agent's context. - Ingestion points: The agent is directed to fetch markdown content from URLs under
https://learn.microsoft.com/en-us/azure/ai-services/content-understanding/using themicrosoft_docs_fetchorfetch_webpagetools. - Boundary markers: None specified in the skill instructions.
- Capability inventory: The skill itself does not contain executable code, scripts, or local file-write capabilities. It relies on platform-provided tools for documentation retrieval.
- Sanitization: No explicit sanitization or filtering of the fetched documentation is mentioned, though the source is a trusted vendor domain.
Audit Metadata