The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill uses pip to install azure-appconfiguration and azure-identity. These are official packages provided by Microsoft/Azure, a well-known and trusted service. No untrusted or suspicious external dependencies are referenced.
[INDIRECT_PROMPT_INJECTION]: The skill implements operations that read data from Azure App Configuration services (e.g., get_configuration_setting, list_configuration_settings). This establishes a data ingestion surface where external configuration values could potentially contain malicious instructions. However, the skill's examples only display these values via print statements and do not pass them to sensitive sinks or execution environments. As this is an inherent property of configuration management tools, it is noted but does not indicate a malicious intent.

azure-appconfiguration-py