azure-communication-sms-java
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill handles untrusted data in the form of SMS recipient numbers and message bodies that are passed to external API calls.\n- Ingestion points: Message recipient strings and body content used in the
smsClient.send()andasyncClient.send()methods inSKILL.md.\n- Boundary markers: No explicit input delimiters or prompt boundary markers are present in the code snippets to distinguish between instructions and data.\n- Capability inventory: The skill utilizes the Azure SDK to perform network operations, specifically sending SMS messages via the Azure Communication Services API.\n- Sanitization: The provided examples do not include logic for sanitizing or validating the content of the message body or the recipient phone numbers before transmission.\n- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download theazure-communication-smsJava dependency from Maven Central, which is the official SDK for Azure Communication Services.
Audit Metadata