azure-storage-blob-ts
Pass
Audited by Gen Agent Trust Hub on Mar 1, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Recommends installation of @azure/storage-blob and @azure/identity from Microsoft, which is a well-known and trusted organization.
- [CREDENTIALS_UNSAFE]: The documentation references the use of sensitive environment variables like AZURE_STORAGE_ACCOUNT_KEY, but correctly utilizes placeholders rather than hardcoding actual credentials.
- [PROMPT_INJECTION]: The skill facilitates downloading and processing external blob data, creating a potential surface for indirect prompt injection.
- Ingestion points: Data is ingested via blobClient.download() and processed through streamToText in SKILL.md.
- Boundary markers: None provided in the implementation examples.
- Capability inventory: Includes file system access via uploadFile and downloadToFile, and network communication with Azure endpoints.
- Sanitization: No explicit sanitization or validation of downloaded content is shown in the provided snippets.
Audit Metadata