azure-eventhub-py
Pass
Audited by Gen Agent Trust Hub on Mar 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the official Azure SDK libraries including
azure-eventhub,azure-identity, andazure-eventhub-checkpointstoreblob-aiofrom the public PyPI registry. These are well-known technology services and are expected for the skill's functionality. - [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection through the ingestion of external event data.
- Ingestion points: Data enters the system via the
EventHubConsumerClientinSKILL.md, specifically through theevent.body_as_str()method in theon_eventcallback. - Boundary markers: There are no boundary markers or instructions to disregard embedded commands in the processed event content.
- Capability inventory: The skill performs network operations to Azure services and provides SDK-based event handling. No arbitrary command execution or local file writing is present.
- Sanitization: No explicit sanitization or validation of the event body is performed before the data is processed or printed.
Audit Metadata