azure-devops
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill is designed to retrieve markdown documentation from
learn.microsoft.comusing themcp_microsoftdocs:microsoft_docs_fetchorfetch_webpagetools. These network operations are directed at official vendor infrastructure to provide current technical information. - [INDIRECT_PROMPT_INJECTION]: The skill processes external documentation content at runtime. While this introduces an attack surface for instructions embedded in external data, the source is restricted to official Microsoft documentation domains, which mitigates the risk of malicious content ingestion.
- [SAFE]: The skill suggests installing utility tools from the official
MicrosoftDocsGitHub organization. These references trace back to the vendor's own verified repositories and represent standard deployment procedures for the skill's environment.
Audit Metadata