azure-appconfiguration-py
Pass
Audited by Gen Agent Trust Hub on Aug 9, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the installation of the
azure-appconfigurationandazure-identityPython packages from the official package registry. These are well-known libraries maintained by Microsoft for Azure integration. - [DATA_EXFILTRATION]: The code examples demonstrate connecting to and exchanging data with Azure App Configuration endpoints (e.g.,
*.azconfig.io). These network operations are the primary intended purpose of the skill for retrieving and setting application configurations. - [PROMPT_INJECTION]: The skill creates an ingestion surface for indirect prompt injection by reading configuration settings and feature flags from external Azure instances in
SKILL.md. Data retrieved viaget_configuration_settingorlist_configuration_settingsenters the agent context without explicit boundary markers or sanitization in the snippets provided. While this presents a potential attack surface if the configuration source is compromised, it is inherent to the functionality of a configuration management tool.
Audit Metadata