azure-nutanix
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill is configured to fetch technical documentation from
learn.microsoft.com, which is an official domain owned by Microsoft. It also references an installation guide on the official MicrosoftDocs GitHub organization. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it is designed to ingest and process content from external URLs. However, the ingestion is restricted to trusted documentation sources.
- [COMMAND_EXECUTION]: The instructions include usage of the
mcp_microsoftdocstoolset. This is a vendor-provided tool for accessing documentation and does not represent a security risk in this context.
Audit Metadata