microsoft-learn-cli
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto download and execute the@microsoft/learn-clipackage from the NPM registry. This resource is provided by a trusted organization and is consistent with the skill's stated purpose. - [COMMAND_EXECUTION]: The skill relies on executing shell commands to search for, fetch, and display documentation content to the agent.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests content from external sources (Microsoft Learn documentation) which could potentially contain instructions aimed at influencing agent behavior.
- Ingestion points: Documentation content retrieved via the
fetchandsearchcommands as described inSKILL.md. - Boundary markers: The skill does not explicitly define delimiters to separate fetched content from internal instructions.
- Capability inventory: The skill has the capability to execute shell commands through the
npxutility. - Sanitization: No specific filtering or sanitization of the retrieved documentation content is implemented beyond the manual warnings in the query safety section.
Audit Metadata