agents-v2-py
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from environment variables to configure cloud resources in Azure, creating a potential attack surface for environment-based configuration injection.
- Ingestion points: Environment variables
AZURE_AI_PROJECT_ENDPOINT,REVIEWED_CONTAINER_IMAGE, andMODEL_DEPLOYMENT_NAMEinSKILL.md. - Capability inventory: Creating and deleting agent versions in Azure AI Foundry via the
azure-ai-projectsSDK inSKILL.md. - Boundary markers: None provided.
- Sanitization: No explicit validation of environment variable values is shown.
- [COMMAND_EXECUTION]: The skill contains instructions for installing the
azure-ai-projectsandazure-identitypackages. These are official Microsoft SDKs for Azure services. - [SAFE]: The skill demonstrates secure practices, such as utilizing
DefaultAzureCredentialfor identity management and providing guidance on cleanup and permission scopes.
Audit Metadata