azure-communication-sms-java

Pass

Audited by Gen Agent Trust Hub on Oct 27, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill handles untrusted data in the form of SMS recipient numbers and message bodies that are passed to external API calls.\n- Ingestion points: Message recipient strings and body content used in the smsClient.send() and asyncClient.send() methods in SKILL.md.\n- Boundary markers: No explicit input delimiters or prompt boundary markers are present in the code snippets to distinguish between instructions and data.\n- Capability inventory: The skill utilizes the Azure SDK to perform network operations, specifically sending SMS messages via the Azure Communication Services API.\n- Sanitization: The provided examples do not include logic for sanitizing or validating the content of the message body or the recipient phone numbers before transmission.\n- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the azure-communication-sms Java dependency from Maven Central, which is the official SDK for Azure Communication Services.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 27, 2026, 01:11 AM