azure-event-grid
Pass
Audited by Gen Agent Trust Hub on Mar 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes Azure CLI commands (az eventgrid) for managing topics and subscriptions, including the retrieval of authentication keys.
- [PROMPT_INJECTION]: Functions provided in the skill process data from Event Grid triggers, which represents an indirect prompt injection surface. * Ingestion points: event_grid_handler functions in SKILL.md. * Boundary markers: No delimiters or ignore instructions are used for the event data. * Capability inventory: Handlers perform logic branching and call downstream functions based on event content. * Sanitization: No sanitization or validation of the event payload is shown in the code samples.
- [DATA_EXFILTRATION]: Demonstrates the configuration of event subscriptions that send data to external webhook endpoints such as myapi.example.com.
Audit Metadata