microsoft-foundry
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches technical documentation and guides from learn.microsoft.com. These are official resources from a well-known service and are consistent with the vendor's (microsoftdocs) identity.
- [INDIRECT_PROMPT_INJECTION]: The skill acts as a documentation retriever, creating a surface for indirect prompt injection by processing external web content.
- Ingestion points: Documentation URLs from learn.microsoft.com are processed via fetch_webpage and the microsoft_docs_fetch tool.
- Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded prompts in the fetched data.
- Capability inventory: The skill utilizes network tools to retrieve content but does not demonstrate high-privilege capabilities like file writing or system command execution.
- Sanitization: No sanitization or validation of the fetched markdown content is described.
Audit Metadata