azure-infra-engineer
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and provides installation instructions for official Microsoft Azure SDK packages from the NPM registry, such as
@azure/arm-resources,@azure/arm-network, and@azure/identity. These are recognized, well-known services from a trusted organization. - [COMMAND_EXECUTION]: The documentation includes standard Azure CLI (
az) commands for authentication, subscription context setting, and resource deployment. These commands are typical for the skill's stated purpose of Azure infrastructure management and are presented as user-executable examples. - [INDIRECT_PROMPT_INJECTION]: The skill implements logic to read and deploy infrastructure defined in Bicep and ARM templates. While the ingestion of external template files represents a vulnerability surface for indirect prompt injection, the risk is inherent to the skill's primary function as an infrastructure-as-code tool and is mitigated by the use of standard SDK methods.
Audit Metadata