azure-key-vault
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references numerous documentation resources located at
learn.microsoft.comand provides an installation link for tools in the officialMicrosoftDocsGitHub organization. These are well-known and trusted vendor services. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest content from external websites to provide up-to-date guidance.
- Ingestion points: Data enters the agent context via
mcp_microsoftdocs:microsoft_docs_fetchor thefetch_webpagetool, as specified in the SKILL.md file. - Boundary markers: The skill does not explicitly define delimiters for the retrieved documentation content.
- Capability inventory: The skill uses
read_filefor internal navigation and network-enabled tools to fetch remote markdown documentation. - Sanitization: The skill relies on the authoritative nature of the vendor's documentation (learn.microsoft.com) and does not specify additional sanitization steps for the retrieved text.
Audit Metadata