azure-sovereign-us
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches documentation content from learn.microsoft.com using the mcp_microsoftdocs tool or fetch_webpage. It also references the official MicrosoftDocs GitHub repository for installation instructions. These are official vendor resources.
- [INDIRECT_PROMPT_INJECTION]: The skill retrieves content from external URLs, which represents a potential surface for indirect prompt injection. However, since the sources are restricted to official Microsoft documentation, the risk is minimal.
- Ingestion points: Web content retrieved via microsoft_docs_fetch and fetch_webpage tools.
- Boundary markers: None explicitly defined in the prompt instructions.
- Capability inventory: The skill is limited to documentation retrieval and does not possess capabilities for file modification, system command execution, or network exfiltration.
- Sanitization: Not explicitly implemented in the skill instructions.
Audit Metadata