azure-copilot
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches documentation from learn.microsoft.com and references a tool repository on GitHub under the MicrosoftDocs organization.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process content from external documentation URLs.
- Ingestion points: Remote documentation is retrieved via the
mcp_microsoftdocs:microsoft_docs_fetchorfetch_webpagetools from learn.microsoft.com (SKILL.md). - Boundary markers: No explicit boundary markers or instructions to disregard embedded commands are present within the skill instructions.
- Capability inventory: The skill enables file reading, web fetching, and the generation of infrastructure-as-code templates (Terraform, Bicep, Kubernetes YAML).
- Sanitization: No explicit sanitization or validation mechanisms for the external documentation content are defined in the skill.
Audit Metadata