azure-import-export
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches documentation content from
learn.microsoft.comand references a setup guide on GitHub atgithub.com/MicrosoftDocs/mcp. These are official Microsoft domains and repositories related to the skill's functionality. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest data from external sources (Microsoft Learn documentation). While this represents an attack surface for indirect prompt injection, the sources are restricted to official documentation domains, and no high-risk capabilities like local command execution or file writes are present in the skill.
- Ingestion points: Data is fetched from URLs listed in the Troubleshooting, Limits & Quotas, and Security sections of
SKILL.mdusingmicrosoft_docs_fetchorfetch_webpagetools. - Boundary markers: None identified in the prompt instructions to delimit the fetched content.
- Capability inventory: The skill uses tools for fetching web content but does not define or request subprocess, filesystem write, or arbitrary command execution capabilities.
- Sanitization: No specific sanitization or filtering of the fetched documentation is described.
Audit Metadata