azure-appconfiguration-ts
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the installation of several official packages from the
@azureand@microsoftscopes on the NPM registry, including@azure/app-configuration,@azure/identity, and@microsoft/feature-management. These are trusted sources.- [PROMPT_INJECTION]: Indirect prompt injection surface detected.- Ingestion points: The skill reads configuration data, feature flags, and Key Vault secrets from the external Azure App Configuration service (e.g., throughclient.getConfigurationSettingandload).- Boundary markers: There are no explicit instructions or delimiters provided to the agent to distinguish between its own logic and the data retrieved from Azure.- Capability inventory: The skill allows the agent to read sensitive data (Key Vault secrets) and perform write operations (create/update/delete settings) within the Azure environment.- Sanitization: No sanitization or validation of the fetched data is performed by the skill before it enters the agent's context.
Audit Metadata