azure-devtest-labs
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill retrieves technical documentation from official Microsoft domains (learn.microsoft.com). This is a standard and safe operation for a documentation-focused agent skill.
- [INDIRECT_PROMPT_INJECTION]: The skill includes an attack surface for indirect prompt injection because it fetches and processes external documentation. However, the source of the data is a well-known trusted organization (Microsoft), which minimizes the risk.
- Ingestion points: Document fetching via
microsoft_docs_fetchorfetch_webpage(SKILL.md). - Boundary markers: Not explicitly defined in the prompt instructions.
- Capability inventory: The skill does not contain scripts for file system modification, network exfiltration, or arbitrary command execution.
- Sanitization: None specified in the provided instructions.
Audit Metadata