azure-service-bus
Pass
Audited by Gen Agent Trust Hub on Mar 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides Azure CLI commands to create and configure Service Bus resources such as queues and topics.
- [COMMAND_EXECUTION]: Includes instructions for retrieving namespace authorization keys via the az servicebus CLI.
- [EXTERNAL_DOWNLOADS]: References official Microsoft SDK libraries for Python (azure-service-bus, azure-identity) and Node.js (@azure/service-bus).
- [PROMPT_INJECTION]: Identifies an indirect prompt injection surface when processing message bodies from external sources. Ingestion points: receiver.receive_messages and receiver.receiveMessages in SDK examples. Boundary markers: No delimiters or warnings used for message content. Capability inventory: SDK messaging operations; no arbitrary code execution or file access based on message content. Sanitization: No sanitization of message bodies is demonstrated.
Audit Metadata