azure-spring-apps

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches content from learn.microsoft.com to provide technical guidance. This targets the official documentation platform of the vendor and is a standard operational requirement for the skill's purpose.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external URLs which could technically serve as an injection vector if the source were compromised.
  • Ingestion points: External content is retrieved using mcp_microsoftdocs:microsoft_docs_fetch or fetch_webpage (SKILL.md).
  • Boundary markers: The instructions do not define specific delimiters for the fetched content.
  • Capability inventory: The skill is used for architectural guidance, configuration, and troubleshooting of cloud infrastructure.
  • Sanitization: No specific sanitization methods for the retrieved documentation are mentioned.
  • Note: The risk is minimized as the data source is the vendor's official documentation site.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 03:21 PM