azure-functions
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill serves as a collection of architectural patterns for Azure Functions in C#, Python, and Node.js. The code templates follow official Microsoft guidelines for the Isolated Worker model and Durable Functions.
- [SAFE]: The 'Validation Checks' section contains proactive security rules that instruct the AI agent to flag hardcoded connection strings, API keys, and insecure synchronization patterns (blocking calls) in the code it reviews.
- [INDIRECT_PROMPT_INJECTION]: The provided templates define handlers for untrusted external data sources, which is a necessary component of web and serverless development.
- Ingestion points: Handlers in
SKILL.mdingest data fromHttpRequestData,HttpRequest,func.HttpRequest,QueueMessage, andInputStream(Blob trigger). - Boundary markers: The templates do not include specific delimiters or 'ignore' instructions for the data being processed, as they are generic boilerplate.
- Capability inventory: The templates demonstrate the use of
HttpClientfor network requests and various output bindings for storage and queues. - Sanitization: While standard error handling and JSON deserialization are included, no specialized sanitization for prompt-based attacks is provided, as these are general-purpose code templates.
Audit Metadata