microsoft-code-reference
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the @microsoft/learn-cli package, which is an official tool from a trusted organization, providing search and fetch capabilities.
- [COMMAND_EXECUTION]: The documentation includes examples of using the mslearn CLI for documentation retrieval and API searches.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest external documentation and code sample data, which is an inherent part of its functionality. [Ingestion points]: data is retrieved from Microsoft documentation APIs via microsoft_docs_fetch and microsoft_code_sample_search tools. [Boundary markers]: no specific delimiters are defined in the instructions for isolating fetched content. [Capability inventory]: the skill allows for tool invocation and shell command execution via the CLI. [Sanitization]: no specific validation or sanitization logic is described for the fetched content.
Audit Metadata