azure-firewall
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill retrieves documentation content from
learn.microsoft.comand provides links to the officialMicrosoftDocsrepository on GitHub for utility installation instructions. These references target official and trusted vendor infrastructure. - [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it ingests and processes external documentation content.
- Ingestion points: External content is retrieved using
mcp_microsoftdocs:microsoft_docs_fetchandfetch_webpagetools. - Boundary markers: The instructions do not define specific delimiters or "ignore" instructions for the fetched content.
- Capability inventory: The skill uses network fetching tools and
read_fileto access local quick-reference data. - Sanitization: No specific sanitization or validation of the fetched Markdown content is performed before processing.
Audit Metadata