azure-hdinsight
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches documentation content from the official
learn.microsoft.comdomain. These references point to trusted vendor resources for Azure HDInsight and do not present a security risk. - [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection as it retrieves and processes external content that could potentially be influenced by an attacker if the source were compromised.
- Ingestion points: Documentation content is retrieved from external URLs under the
learn.microsoft.comdomain using themcp_microsoftdocs:microsoft_docs_fetchorfetch_webpagetools. - Boundary markers: The instructions do not specify explicit delimiters or markers to separate untrusted external content from the agent's core instructions.
- Capability inventory: The skill uses tools to read files and perform network fetch operations to retrieve documentation.
- Sanitization: There is no evidence of explicit sanitization or validation of the fetched documentation content within the skill instructions.
Audit Metadata