agents-v2-py

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from environment variables to configure cloud resources in Azure, creating a potential attack surface for environment-based configuration injection.
  • Ingestion points: Environment variables AZURE_AI_PROJECT_ENDPOINT, REVIEWED_CONTAINER_IMAGE, and MODEL_DEPLOYMENT_NAME in SKILL.md.
  • Capability inventory: Creating and deleting agent versions in Azure AI Foundry via the azure-ai-projects SDK in SKILL.md.
  • Boundary markers: None provided.
  • Sanitization: No explicit validation of environment variable values is shown.
  • [COMMAND_EXECUTION]: The skill contains instructions for installing the azure-ai-projects and azure-identity packages. These are official Microsoft SDKs for Azure services.
  • [SAFE]: The skill demonstrates secure practices, such as utilizing DefaultAzureCredential for identity management and providing guidance on cleanup and permission scopes.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 12:55 PM