azure-hdinsight

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches documentation content from the official learn.microsoft.com domain. These references point to trusted vendor resources for Azure HDInsight and do not present a security risk.
  • [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection as it retrieves and processes external content that could potentially be influenced by an attacker if the source were compromised.
  • Ingestion points: Documentation content is retrieved from external URLs under the learn.microsoft.com domain using the mcp_microsoftdocs:microsoft_docs_fetch or fetch_webpage tools.
  • Boundary markers: The instructions do not specify explicit delimiters or markers to separate untrusted external content from the agent's core instructions.
  • Capability inventory: The skill uses tools to read files and perform network fetch operations to retrieve documentation.
  • Sanitization: There is no evidence of explicit sanitization or validation of the fetched documentation content within the skill instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 03:21 PM