azure-mgmt-apicenter-py
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install standard Python packages for Azure management.
- Evidence: 'pip install azure-mgmt-apicenter' and 'pip install azure-identity' in SKILL.md. These are the official SDKs provided by Microsoft for interacting with Azure API Center.
- [INDIRECT_PROMPT_INJECTION]: The skill introduces a surface for indirect prompt injection through its API specification import functionality.
- Ingestion points: The 'import_specification' method in SKILL.md takes external string content as the API definition.
- Boundary markers: No specific boundary markers or instructions are provided to the agent to treat the imported specification content as untrusted data.
- Capability inventory: The skill allows the agent to create and modify API definitions, versions, and deployments within the Azure API Center using the 'ApiCenterMgmtClient', which performs authenticated network operations.
- Sanitization: The implementation shows direct ingestion of the specification value into the SDK call without validation or escaping logic.
Audit Metadata