azure-storage-blob-py
Pass
Audited by Gen Agent Trust Hub on Aug 9, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches official Microsoft libraries (azure-storage-blob and azure-identity) from the standard PyPI registry to interact with cloud services.
- [PROMPT_INJECTION]: The skill provides a surface for indirect prompt injection by ingesting data from external cloud storage that could contain instructions designed to influence the agent.
- Ingestion points: Reads content from blobs using readall() and retrieves blob metadata via list_blobs().
- Boundary markers: The skill does not include specific markers or instructions to treat the retrieved content as data rather than instructions.
- Capability inventory: The skill allows writing to the local file system and performing uploads to cloud storage.
- Sanitization: There is no logic present for sanitizing or filtering the content retrieved from external storage containers.
Audit Metadata