azure-managed-lustre
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process documentation from external URLs (learn.microsoft.com). This creates a theoretical surface for indirect prompt injection if the fetched content were to contain malicious instructions.
- Ingestion points: Remote content retrieved via mcp_microsoftdocs:microsoft_docs_fetch or fetch_webpage (SKILL.md).
- Boundary markers: None explicitly defined for the fetched content.
- Capability inventory: Reading and processing external markdown content.
- Sanitization: Not explicitly implemented in the skill instructions.
- [EXTERNAL_DOWNLOADS]: The skill fetches documentation from Microsoft's official documentation site (learn.microsoft.com). This is an expected behavior for a knowledge-base skill and targets a well-known service.
- [SAFE]: The skill references the official GitHub repository for the mcp_microsoftdocs tool for installation guidance, which is a resource provided by the vendor.
Audit Metadata