azure-dns
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches documentation from official Microsoft domains (learn.microsoft.com). These requests include a hardcoded telemetry parameter (from=learn-agent-skill) to track usage by the agent skill. It also provides a link to an official Microsoft GitHub repository for tool installation guidance.- [INDIRECT_PROMPT_INJECTION]: The skill processes external web content, which represents a potential attack surface.
- Ingestion points: Documentation is retrieved in Markdown format from learn.microsoft.com via documentation-specific tools (
mcp_microsoftdocs:microsoft_docs_fetchorfetch_webpage). - Boundary markers: Fetched content is not wrapped in specific delimiters or boundary markers within the prompt instructions.
- Capability inventory: The skill is informational and does not possess capabilities to modify the file system, execute arbitrary commands, or perform non-documentation network operations.
- Sanitization: Content is handled as standard documentation text without additional filtering for instructions.
Audit Metadata