azure-operator-nexus
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill is configured to fetch technical documentation from
learn.microsoft.com. These references target official Microsoft service documentation, which are trusted and legitimate sources for the skill's stated purpose.- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external documentation pages, which technically constitutes an indirect prompt injection surface. However, the risk is negligible as the data source is the vendor's own official documentation. - Ingestion points: External content is retrieved from
learn.microsoft.comvia themcp_microsoftdocsorfetch_webpagetools. - Boundary markers: None explicitly defined in the skill instructions for the fetched content.
- Capability inventory: The skill provides reference information and does not define any local code execution or sensitive file modification capabilities.
- Sanitization: None specified; relies on the integrity of the official documentation source.
Audit Metadata