azure-ai-vision-imageanalysis-java
Pass
Audited by Gen Agent Trust Hub on Mar 1, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill incorporates the official
com.azure:azure-ai-vision-imageanalysisandcom.azure:azure-identitydependencies. These are maintained by Microsoft Azure, a well-known and trusted service provider. - [SAFE]: The documentation and code examples prioritize secure authentication. They correctly advocate for the use of environment variables (
VISION_KEY,VISION_ENDPOINT) and theDefaultAzureCredentialBuilderto prevent sensitive information from being hardcoded in source code. - [SAFE]: The skill's functionality, including image fetching via URL for analysis (
analyzeFromUrl), is consistent with the primary purpose of the Microsoft SDK and does not exhibit malicious network behavior or unauthorized data exfiltration. - [SAFE]: No patterns of prompt injection, code obfuscation, or privilege escalation were identified. The instructions focus on legitimate implementation details for OCR, object detection, and image captioning.
Audit Metadata