azure-ai-translation-text-py
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the
azure-ai-translation-textandazure-identityPython packages. These are official SDKs from Microsoft Azure, a well-known cloud service provider. - [SAFE]: No hardcoded credentials were detected. The instructions correctly guide the user to manage sensitive data like API keys and regions via environment variables.
- [PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection (Category 8) because it processes untrusted text input through translation and detection methods.
- Ingestion points: Untrusted data enters the agent context via the
bodyparameter in methods such asclient.translate,client.transliterate, andclient.detectinSKILL.md. - Boundary markers: The provided examples do not demonstrate the use of delimiters or specific instructions to the agent to ignore malicious instructions embedded within the text to be translated.
- Capability inventory: The skill performs network operations to communicate with Azure API endpoints.
- Sanitization: There is no evidence of input validation or sanitization of the strings provided to the SDK.
Audit Metadata