azure-verified-modules
Warn
Audited by Snyk on Mar 6, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly directs the agent to consult public AVM pages (see "Finding AVM for Reference" with links to https://azure.github.io/Azure-Verified-Modules/ and the Terraform Registry and example search_modules/get_module_details calls), meaning the agent would fetch and interpret open/public third‑party content that can influence its module-design decisions.
Audit Metadata