azure-storage-blob-java
Pass
Audited by Gen Agent Trust Hub on Aug 9, 2026
Risk Level: SAFEPROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [SAFE]: The skill provides instructions for integrating the official
com.azure:azure-storage-bloblibrary, which is a verified package from a well-known technology provider. - [DATA_EXFILTRATION]: The skill enables file system access and network communication for the purpose of blob management. It includes methods for uploading local files to Azure (
uploadFromFile) and downloading blobs to the local disk (downloadToFile). These operations are directed to official Azure service endpoints and are consistent with the skill's stated purpose. - [PROMPT_INJECTION]: The skill introduces a surface for indirect prompt injection by enabling the agent to ingest data from external storage blobs.
- Ingestion points: Data is read into the agent's context through methods like
blobClient.downloadContent()andblobClient.openInputStream()as described inSKILL.md. - Boundary markers: The provided patterns do not include delimiters or specific instructions to help the agent distinguish between data and potential commands within the blob content.
- Capability inventory: The agent is granted capabilities to write to the local file system (
downloadToFile) and perform network operations via the Azure SDK. - Sanitization: There are no examples of input validation, filtering, or sanitization for the content retrieved from external blobs.
Audit Metadata