azure-storage
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and provides installation commands for official Azure SDK packages for .NET, Java, JavaScript, Python, Go, and Rust. It also links to official Microsoft documentation for Azure Storage services. These are legitimate resources from a well-known service provider.
- [INDIRECT_PROMPT_INJECTION]: The skill exposes capabilities to read external data via tools like
storage_blob_getand CLI commands. This represents a potential attack surface where an agent could ingest malicious instructions embedded in a blob. However, this is a standard capability for storage management tools. - Ingestion points:
storage_blob_gettool (SKILL.md),az storage blob downloadcommand (SKILL.md). - Boundary markers: None specified in the documentation.
- Capability inventory: Listing, reading, and writing to Azure Storage accounts, containers, and blobs.
- Sanitization: None specified; the skill provides raw access to storage content.
Audit Metadata