azure-spring-apps
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches content from
learn.microsoft.comto provide technical guidance. This targets the official documentation platform of the vendor and is a standard operational requirement for the skill's purpose. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external URLs which could technically serve as an injection vector if the source were compromised.
- Ingestion points: External content is retrieved using
mcp_microsoftdocs:microsoft_docs_fetchorfetch_webpage(SKILL.md). - Boundary markers: The instructions do not define specific delimiters for the fetched content.
- Capability inventory: The skill is used for architectural guidance, configuration, and troubleshooting of cloud infrastructure.
- Sanitization: No specific sanitization methods for the retrieved documentation are mentioned.
- Note: The risk is minimized as the data source is the vendor's official documentation site.
Audit Metadata