azure-containerregistry-py
Pass
Audited by Gen Agent Trust Hub on Mar 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
azure-containerregistryandazure-identitypackages from PyPI, which are official Microsoft libraries. - [SAFE]: Secure authentication is implemented via
DefaultAzureCredential, which avoids hardcoded credentials and leverages environment-based or managed identity authentication. - [SAFE]: No suspicious network operations, obfuscation, or privilege escalation patterns were detected.
- [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection. Ingestion points: Data retrieved from Azure Container Registry (e.g., repository names, tag names) via SDK methods in
SKILL.md. Boundary markers: None present. Capability inventory: Network operations to Azure services and local file writing for downloaded artifacts. Sanitization: No explicit sanitization of registry metadata is shown before output or usage in API calls.
Audit Metadata