azure-diagnostics
Pass
Audited by Gen Agent Trust Hub on Feb 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes official Azure CLI (
az) anddockercommands to perform diagnostic operations, such as streaming logs, checking registry settings, and investigating provisioning states. These actions are consistent with the skill's primary purpose of production troubleshooting and do not involve unauthorized privilege escalation. - [EXTERNAL_DOWNLOADS]: The skill references the installation of the
resource-graphAzure CLI extension. As this is an official extension from Microsoft (a trusted vendor), the reference is safe and follows standard cloud administration workflows. - [DATA_EXFILTRATION]: Network operations are limited to health checks via
curltargeting official Azure subdomains (azurecontainerapps.io). No patterns were found indicating the transmission of sensitive credentials or telemetry to untrusted third-party servers. - [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface as it analyzes external data. Ingestion points: Resource logs and metrics accessed via
az containerapp logs showandmcp_azure_mcp_monitor. Boundary markers: None specified in the provided files. Capability inventory: Execution of CLI commands and KQL queries for system analysis. Sanitization: No explicit content filtering is implemented for log data. This surface is characteristic of log analysis tools, and no malicious override instructions were detected.
Audit Metadata