microsoft-foundry
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the creation of Retrieval-Augmented Generation (RAG) and agentic applications that ingest untrusted data from external sources and have the capability to execute actions based on that data.
- Ingestion points: Data enters the agent context through Azure AI Search indexes (
foundry_knowledge_index_list) and Bing web search results (BingGroundingToolDefinition) as described inlanguage/python.md. - Boundary markers: Instructions provided in
language/python.mdinclude defensive prompts such as "If you cannot find the answer in the knowledge base, say 'I don't know'" and "Never answer from your own knowledge - only use the knowledge base."
- Capability inventory: Agents are equipped with
FunctionToolfor executing custom Python functions andBingGroundingToolDefinitionfor web exploration, creating a potential for automated action based on malicious data. - Sanitization: The provided code samples do not implement explicit sanitization, filtering, or validation of the retrieved external content before it is processed by the language model.
- [EXTERNAL_DOWNLOADS]: The guide includes instructions to install official and well-known Python libraries.
- Packages: Fetches the following libraries from standard registries:
azure-ai-projects,azure-identity,azure-ai-inference,openai,azure-ai-evaluation, andpython-dotenv. - [COMMAND_EXECUTION]: The skill provides numerous Azure CLI commands to help users manage their infrastructure.
- Commands: Includes commands like
az resource list,az cognitiveservices account deployment create, andaz role assignment createto configure services and permissions within the user's Azure environment.
Audit Metadata