azure-communication-chat-java
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the 'com.azure:azure-communication-chat' library (version 1.6.0) as a Maven dependency. This is an official SDK from a well-known technology provider and is considered a safe resource.
- [INDIRECT_PROMPT_INJECTION]: The skill documents methods for retrieving external chat content (e.g.,
listMessages). While this introduces a surface area for indirect prompt injection if the agent processes untrusted message data, the skill includes explicit warnings about HTML sanitization and secure logging to mitigate these risks. - [SAFE]: The skill uses environment variables for sensitive tokens (
AZURE_COMMUNICATION_USER_TOKEN) and includes instructions for maintaining user privacy and least-privilege access, aligning with standard security best practices.
Audit Metadata