azure-eventhub-dotnet
Pass
Audited by Gen Agent Trust Hub on Apr 24, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- Indirect Prompt Injection Surface: The skill is designed to receive and process messages from Azure Event Hubs (e.g., via the
args.Data.EventBodyproperty). Because this content originates from external producers, it could potentially contain data that an agent might interpret as instructions. This is a standard characteristic of event-processing systems and should be managed by validating or sanitizing event content before using it in decision-making logic. - Secure Authentication Practices: The skill correctly promotes the use of
DefaultAzureCredentialfor production environments. This approach leverages Azure Active Directory and managed identities, which is a significant security improvement over hardcoding or storing sensitive connection strings in configuration files.
Audit Metadata