azure-appconfiguration-py

Pass

Audited by Gen Agent Trust Hub on Aug 9, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references the installation of the azure-appconfiguration and azure-identity Python packages from the official package registry. These are well-known libraries maintained by Microsoft for Azure integration.
  • [DATA_EXFILTRATION]: The code examples demonstrate connecting to and exchanging data with Azure App Configuration endpoints (e.g., *.azconfig.io). These network operations are the primary intended purpose of the skill for retrieving and setting application configurations.
  • [PROMPT_INJECTION]: The skill creates an ingestion surface for indirect prompt injection by reading configuration settings and feature flags from external Azure instances in SKILL.md. Data retrieved via get_configuration_setting or list_configuration_settings enters the agent context without explicit boundary markers or sanitization in the snippets provided. While this presents a potential attack surface if the configuration source is compromised, it is inherent to the functionality of a configuration management tool.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 9, 2026, 06:32 PM
Security Audit — agent-trust-hub — azure-appconfiguration-py