azure-monitor-ingestion-py
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [Indirect Prompt Injection Surface]: The skill demonstrates the ingestion and processing of data from local sources such as
logs.json. While this is standard for a logging tool, it represents a potential surface where untrusted data could influence agent behavior if processed further without strict boundaries. - Ingestion points: The
Upload from JSON Filesection inSKILL.mdreads data directly fromlogs.json. - Boundary markers: The provided code examples do not explicitly implement delimiters or specific instructions to ignore embedded commands within the log data.
- Capability inventory: The skill utilizes network capabilities via the
LogsIngestionClient.uploadmethod to send data to Azure Monitor endpoints. - Sanitization: No explicit sanitization or validation logic is included in the examples for the ingested log content.
- [Command Execution]: The installation instructions utilize
pip installto manage dependencies. These dependencies, specificallyazure-monitor-ingestionandazure-identity, are well-known packages provided by the service vendor and are used within the scope of their intended functionality.
Audit Metadata