azure-sql-virtual-machines

Pass

Audited by Gen Agent Trust Hub on Oct 7, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches documentation content from learn.microsoft.com and references official installation guides on github.com/MicrosoftDocs. These are trusted sources that align with the skill's purpose and author.
  • [INDIRECT_PROMPT_INJECTION]: The skill acts as a bridge for the agent to ingest external documentation, creating an indirect prompt injection surface.
  • Ingestion points: Markdown content retrieved from learn.microsoft.com via mcp_microsoftdocs:microsoft_docs_fetch or fetch_webpage in SKILL.md.
  • Boundary markers: The instructions do not define specific delimiters or headers to isolate fetched content from the agent's system instructions.
  • Capability inventory: The skill is restricted to documentation retrieval and file reading; it does not include tools for file modification, network exfiltration, or shell execution.
  • Sanitization: There is no mention of sanitization or filtering for the fetched markdown content.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 7, 2026, 12:23 AM