azure-diagnostics
Fail
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: HIGHPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- PROMPT_INJECTION (HIGH): The skill is vulnerable to Indirect Prompt Injection (Category 8) because it ingests untrusted log data. 1. Ingestion points: Log data is retrieved via
az containerapp logs showandmcp_azure_mcp_monitor. 2. Boundary markers: Absent; no delimiters are used to separate logs from instructions. 3. Capability inventory: The skill uses state-changing commands likeaz containerapp updateandaz containerapp registry set. 4. Sanitization: Absent. - COMMAND_EXECUTION (MEDIUM): Utilizes the Azure CLI for diagnostic and remediation actions. The risk is elevated because commands can be executed based on the results of log queries.
- EXTERNAL_DOWNLOADS (LOW): The skill requires the
resource-graphAzure CLI extension. This is a trusted download from Microsoft, resulting in a LOW severity per [TRUST-SCOPE-RULE].
Recommendations
- AI detected serious security threats
Audit Metadata