azure-cyclecloud
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and fetches documentation from official domains including
learn.microsoft.comand theMicrosoftDocsGitHub organization. These are official resources from a well-known service provider. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external documentation URLs using tools like
mcp_microsoftdocs:microsoft_docs_fetch. This creates a surface where external content is interpolated into the agent's context. - Ingestion points: Documentation content is fetched from
learn.microsoft.comas specified in the usage instructions inSKILL.md. - Boundary markers: The skill does not define specific delimiters or explicit instructions for the agent to ignore potentially malicious instructions embedded within the fetched Markdown content.
- Capability inventory: The skill's capabilities are limited to information retrieval and explanation; it does not contain instructions or tools for sensitive file access, persistent storage, or arbitrary command execution.
- Sanitization: There is no evidence of sanitization, filtering, or validation performed on the retrieved documentation before it is processed by the agent.
Audit Metadata