azure-key-vault

Pass

Audited by Gen Agent Trust Hub on Sep 28, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references numerous documentation resources located at learn.microsoft.com and provides an installation link for tools in the official MicrosoftDocs GitHub organization. These are well-known and trusted vendor services.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest content from external websites to provide up-to-date guidance.
  • Ingestion points: Data enters the agent context via mcp_microsoftdocs:microsoft_docs_fetch or the fetch_webpage tool, as specified in the SKILL.md file.
  • Boundary markers: The skill does not explicitly define delimiters for the retrieved documentation content.
  • Capability inventory: The skill uses read_file for internal navigation and network-enabled tools to fetch remote markdown documentation.
  • Sanitization: The skill relies on the authoritative nature of the vendor's documentation (learn.microsoft.com) and does not specify additional sanitization steps for the retrieved text.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 28, 2026, 06:24 AM