microsoft-docs
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill defines tools for documentation retrieval and does not contain any code, obfuscation, or requests for sensitive permissions.
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates fetching external content from Microsoft Learn, which inherently introduces a surface for indirect prompt injection if the retrieved content contains malicious instructions.
- Ingestion points: External data is ingested through the
microsoft_docs_fetchtool mentioned inSKILL.md. - Boundary markers: The skill instructions do not specify any boundary markers or delimiters to isolate fetched content.
- Capability inventory: The skill does not provide access to dangerous system capabilities like direct file writing, network exfiltration of local data, or command execution.
- Sanitization: No sanitization or validation of the fetched documentation content is mentioned.
Audit Metadata