azure-devops

Pass

Audited by Gen Agent Trust Hub on Oct 6, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill is designed to retrieve markdown documentation from learn.microsoft.com using the mcp_microsoftdocs:microsoft_docs_fetch or fetch_webpage tools. These network operations are directed at official vendor infrastructure to provide current technical information.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external documentation content at runtime. While this introduces an attack surface for instructions embedded in external data, the source is restricted to official Microsoft documentation domains, which mitigates the risk of malicious content ingestion.
  • [SAFE]: The skill suggests installing utility tools from the official MicrosoftDocs GitHub organization. These references trace back to the vendor's own verified repositories and represent standard deployment procedures for the skill's environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 6, 2026, 05:39 AM