azure-deployment-environments

Pass

Audited by Gen Agent Trust Hub on Sep 24, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to use microsoft_docs_fetch or fetch_webpage to retrieve documentation from external URLs. This represents an indirect prompt injection surface as the agent processes data from external sources.
  • Ingestion points: Content is fetched from various learn.microsoft.com URLs listed in the Category Index within SKILL.md.
  • Boundary markers: The skill does not define specific delimiters or instructions to the agent to treat the fetched content as untrusted data.
  • Capability inventory: The skill functions as a documentation reference and does not include scripts for file system modification, command execution, or other high-privilege operations.
  • Sanitization: There are no mechanisms described for sanitizing or filtering the fetched content before it is processed by the agent.
  • [EXTERNAL_DOWNLOADS]: The skill references documentation hosted on learn.microsoft.com and provides links to the official MicrosoftDocs GitHub repository for tool installation. These resources belong to well-known services and the skill's official vendor infrastructure.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 24, 2026, 01:54 PM