azure-sql-virtual-machines
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches documentation content from
learn.microsoft.comand references official installation guides ongithub.com/MicrosoftDocs. These are trusted sources that align with the skill's purpose and author. - [INDIRECT_PROMPT_INJECTION]: The skill acts as a bridge for the agent to ingest external documentation, creating an indirect prompt injection surface.
- Ingestion points: Markdown content retrieved from
learn.microsoft.comviamcp_microsoftdocs:microsoft_docs_fetchorfetch_webpageinSKILL.md. - Boundary markers: The instructions do not define specific delimiters or headers to isolate fetched content from the agent's system instructions.
- Capability inventory: The skill is restricted to documentation retrieval and file reading; it does not include tools for file modification, network exfiltration, or shell execution.
- Sanitization: There is no mention of sanitization or filtering for the fetched markdown content.
Audit Metadata