azure-functions-tests

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The runtime workflow runs a local Azure Functions host (func start) and relies on the developer/CI to submit HTTP/admin calls (e.g., curl POST to /admin/functions/<name>); any free text those requests carry is user-supplied at runtime, but the skill does not ingest outsider-authored text from any external third-party source or queue/feed it monitors.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The CI/setup commands fetch and install runtime binaries (they curl the Microsoft apt key and add the Microsoft apt repo: https://packages.microsoft.com/keys/microsoft.asc and https://packages.microsoft.com/repos/microsoft-ubuntu-$(lsb_release -cs)-prod, and pull the Azurite container mcr.microsoft.com/azure-storage/azurite) which download and run remote code required by the skill.