azure-storage-blob-ts
Pass
Audited by Gen Agent Trust Hub on Apr 5, 2026
Risk Level: SAFE
Full Analysis
- Credential Management: The documentation emphasizes the use of managed identities and environment variables to handle secrets. This approach avoids hardcoding sensitive information, aligning with industry safety standards.
- Service Communication: Code patterns involve communication with standard Microsoft Azure endpoints. These are recognized services required for the skill's operation.
- Resource Access: The skill utilizes file system and network capabilities to transfer data to and from cloud storage. These actions are transparently presented as core features of the SDK library.
- Data Input Surface: There is a potential consideration for indirect prompt injection if the agent processes blob content from untrusted sources. Ingestion points: Blob content retrieved via download methods in
SKILL.mdandreferences/streaming.md. Boundary markers: None present in the documentation code snippets. Capability inventory: Includes local file read/write and network requests to Azure storage services. Sanitization: Content validation is expected to be managed by the application logic using the SDK.
Audit Metadata