azure-deployment-environments
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to use
microsoft_docs_fetchorfetch_webpageto retrieve documentation from external URLs. This represents an indirect prompt injection surface as the agent processes data from external sources. - Ingestion points: Content is fetched from various
learn.microsoft.comURLs listed in the Category Index withinSKILL.md. - Boundary markers: The skill does not define specific delimiters or instructions to the agent to treat the fetched content as untrusted data.
- Capability inventory: The skill functions as a documentation reference and does not include scripts for file system modification, command execution, or other high-privilege operations.
- Sanitization: There are no mechanisms described for sanitizing or filtering the fetched content before it is processed by the agent.
- [EXTERNAL_DOWNLOADS]: The skill references documentation hosted on
learn.microsoft.comand provides links to the officialMicrosoftDocsGitHub repository for tool installation. These resources belong to well-known services and the skill's official vendor infrastructure.
Audit Metadata