{ "skill_name": "azure-cloud-migrate", "skill_path": "/Users/brianlevine/claude-projects/skill-scanner-test/skills/microsoft-azure-skills/.github/plugins/azure-skills/skills/azure-cloud-migrate", "is_safe": true, "max_severity": "MEDIUM", "findings_count": 8, "findings": [ { "id": "BASH_TAINT_f24e1f350a", "rule_id": "BEHAVIOR_BASH_TAINT_FLOW", "category": "data_exfiltration", "severity": "MEDIUM", "title": "Bash: tainted data flows to dangerous sink", "description": "Variable $SUBNET_ID (line 4) flows to `source` at line 7.", "file_path": "references/services/container-apps/cloudrun-deployment-guide.md", "line_number": 82, "snippet": "--infrastructure-subnet-resource-id \"$SUBNET_ID\"", "remediation": "Review the data flow from source to sink. Avoid sending sensitive or untrusted data to network or execution commands.", "analyzer": "behavioral", "metadata": { "source_var": "SUBNET_ID", "source_line": 4, "sink_command": "source", "taints": [ "COMMAND_OUTPUT" ], "behavior_category": "command_injection", "from_code_block": true, "block_language": "bash", "aitech": "AITech-8.2", "aitech_name": "Data Exfiltration / Exposure", "aisubtech": "AISubtech-8.2.3", "aisubtech_name": "Data Exfiltration via Agent Tooling", "aitech_mappings": [ "OWASP: LLM02:2026: Sensitive Information Disclosure", "OWASP: ASI09: Human-Agent Trust Exploitation", "MITRE ATLAS: AML.T0024.000: Exfiltration via AI Inference API: Infer Training Data Membership", "MITRE ATLAS: AML.T0035: AI Artifact Collection", "MITRE ATLAS: AML.T0037: Data From Local System", "MITRE ATLAS: AML.T0057: LLM Data Leakage", "NIST AML: NISTAML.037: Training Data Attacks" ], "aisubtech_mappings": [ "OWASP: LLM02:2026: Sensitive Information Disclosure", "OWASP: ASI02: Tool Misuse & Exploitation", "OWASP: ASI09: Human-Agent Trust Exploitation", "MITRE ATLAS: AML.T0086: Exfiltration via AI Agent Tool Invocation", "NIST AML: N/A" ], "framework_mappings": [ "OWASP: LLM02:2026: Sensitive Information Disclosure", "OWASP: ASI02: Tool Misuse & Exploitation", "OWASP: ASI09: Human-Agent Trust Exploitation", "MITRE ATLAS: AML.T0086: Exfiltration via AI Agent Tool Invocation", "NIST AML: N/A" ], "taxonomy_status": "mapped", "taxonomy_source": "rule" } }, { "id": "BASH_TAINT_43d761a6af", "rule_id": "BEHAVIOR_BASH_TAINT_FLOW", "category": "data_exfiltration", "severity": "MEDIUM", "title": "Bash: tainted data flows to dangerous sink", "description": "Variable $FQDN (line 1) flows to `curl` at line 2.", "file_path": "references/services/container-apps/cloudrun-deployment-guide.md", "line_number": 194, "snippet": "curl -I \"https://$FQDN/health\"", "remediation": "Review the data flow from source to sink. Avoid sending sensitive or untrusted data to network or execution commands.", "analyzer": "behavioral", "metadata": { "source_var": "FQDN", "source_line": 1, "sink_command": "curl", "taints": [ "COMMAND_OUTPUT" ], "behavior_category": "command_injection", "from_code_block": true, "block_language": "bash", "aitech": "AITech-8.2", "aitech_name": "Data Exfiltration / Exposure", "aisubtech": "AISubtech-8.2.3", "aisubtech_name": "Data Exfiltration via Agent Tooling", "aitech_mappings": [ "OWASP: LLM02:2026: Sensitive Information Disclosure", "OWASP: ASI09: Human-Agent Trust Exploitation", "MITRE ATLAS: AML.T0024.000: Exfiltration via AI Inference API: Infer Training Data Membership", "MITRE ATLAS: AML.T0035: AI Artifact Collection", "MITRE ATLAS: AML.T0037: Data From Local System", "MITRE ATLAS: AML.T0057: LLM Data Leakage", "NIST AML: NISTAML.037: Training Data Attacks" ], "aisubtech_mappings": [ "OWASP: LLM02:2026: Sensitive Information Disclosure", "OWASP: ASI02: Tool Misuse & Exploitation", "OWASP: ASI09: Human-Agent Trust Exploitation", "MITRE ATLAS: AML.T0086: Exfiltration via AI Agent Tool Invocation", "NIST AML: N/A" ], "framework_mappings": [ "OWASP: LLM02:2026: Sensitive Information Disclosure", "OWASP: ASI02: Tool Misuse & Exploitation", "OWASP: ASI09: Human-Agent Trust Exploitation", "MITRE ATLAS: AML.T0086: Exfiltration via AI Agent Tool Invocation", "NIST AML: N/A" ], "taxonomy_status": "mapped", "taxonomy_source": "rule" } }, { "id": "BASH_TAINT_ff4d03c11c", "rule_id": "BEHAVIOR_BASH_TAINT_FLOW", "category": "data_exfiltration", "severity": "MEDIUM", "title": "Bash: tainted data flows to dangerous sink", "description": "Variable $LOG_ID (line 3) flows to `source` at line 5.", "file_path": "references/services/container-apps/deployment-guide.md", "line_number": 65, "snippet": "az containerapp env create --name myapp-env --resource-group myapp-rg --location eastus --logs-workspace-id \"$LOG_ID\" --logs-workspace-key \"$LOG_KEY\"", "remediation": "Review the data flow from source to sink. Avoid sending sensitive or untrusted data to network or execution commands.", "analyzer": "behavioral", "metadata": { "source_var": "LOG_ID", "source_line": 3, "sink_command": "source", "taints": [ "COMMAND_OUTPUT" ], "behavior_category": "command_injection", "from_code_block": true, "block_language": "bash", "aitech": "AITech-8.2", "aitech_name": "Data Exfiltration / Exposure", "aisubtech": "AISubtech-8.2.3", "aisubtech_name": "Data Exfiltration via Agent Tooling", "aitech_mappings": [ "OWASP: LLM02:2026: Sensitive Information Disclosure", "OWASP: ASI09: Human-Agent Trust Exploitation", "MITRE ATLAS: AML.T0024.000: Exfiltration via AI Inference API: Infer Training Data Membership", "MITRE ATLAS: AML.T0035: AI Artifact Collection", "MITRE ATLAS: AML.T0037: Data From Local System", "MITRE ATLAS: AML.T0057: LLM Data Leakage", "NIST AML: NISTAML.037: Training Data Attacks" ], "aisubtech_mappings": [ "OWASP: LLM02:2026: Sensitive Information Disclosure", "OWASP: ASI02: Tool Misuse & Exploitation", "OWASP: ASI09: Human-Agent Trust Exploitation", "MITRE ATLAS: AML.T0086: Exfiltration via AI Agent Tool Invocation", "NIST AML: N/A" ], "framework_mappings": [ "OWASP: LLM02:2026: Sensitive Information Disclosure", "OWASP: ASI02: Tool Misuse & Exploitation", "OWASP: ASI09: Human-Agent Trust Exploitation", "MITRE ATLAS: AML.T0086: Exfiltration via AI Agent Tool Invocation", "NIST AML: N/A" ], "taxonomy_status": "mapped", "taxonomy_source": "rule" } }, { "id": "BASH_TAINT_06c615e12c", "rule_id": "BEHAVIOR_BASH_TAINT_FLOW", "category": "data_exfiltration", "severity": "MEDIUM", "title": "Bash: tainted data flows to dangerous sink", "description": "Variable $FQDN (line 2) flows to `curl` at line 4.", "file_path": "references/services/container-apps/deployment-guide.md", "line_number": 160, "snippet": "curl https://$FQDN/health", "remediation": "Review the data flow from source to sink. Avoid sending sensitive or untrusted data to network or execution commands.", "analyzer": "behavioral", "metadata": { "source_var": "FQDN", "source_line": 2, "sink_command": "curl", "taints": [ "COMMAND_OUTPUT" ], "behavior_category": "command_injection", "from_code_block": true, "block_language": "bash", "aitech": "AITech-8.2", "aitech_name": "Data Exfiltration / Exposure", "aisubtech": "AISubtech-8.2.3", "aisubtech_name": "Data Exfiltration via Agent Tooling", "aitech_mappings": [ "OWASP: LLM02:2026: Sensitive Information Disclosure", "OWASP: ASI09: Human-Agent Trust Exploitation", "MITRE ATLAS: AML.T0024.000: Exfiltration via AI Inference API: Infer Training Data Membership", "MITRE ATLAS: AML.T0035: AI Artifact Collection", "MITRE ATLAS: AML.T0037: Data From Local System", "MITRE ATLAS: AML.T0057: LLM Data Leakage", "NIST AML: NISTAML.037: Training Data Attacks" ], "aisubtech_mappings": [ "OWASP: LLM02:2026: Sensitive Information Disclosure", "OWASP: ASI02: Tool Misuse & Exploitation", "OWASP: ASI09: Human-Agent Trust Exploitation", "MITRE ATLAS: AML.T0086: Exfiltration via AI Agent Tool Invocation", "NIST AML: N/A" ], "framework_mappings": [ "OWASP: LLM02:2026: Sensitive Information Disclosure", "OWASP: ASI02: Tool Misuse & Exploitation", "OWASP: ASI09: Human-Agent Trust Exploitation", "MITRE ATLAS: AML.T0086: Exfiltration via AI Agent Tool Invocation", "NIST AML: N/A" ], "taxonomy_status": "mapped", "taxonomy_source": "rule" } }, { "id": "BASH_TAINT_0333dd73ea", "rule_id": "BEHAVIOR_BASH_TAINT_FLOW", "category": "data_exfiltration", "severity": "MEDIUM", "title": "Bash: tainted data flows to dangerous sink", "description": "Variable $SUBNET_ID (line 7) flows to `source` at line 10.", "file_path": "references/services/container-apps/fargate-deployment-guide.md", "line_number": 75, "snippet": "--infrastructure-subnet-resource-id \"$SUBNET_ID\"", "remediation": "Review the data flow from source to sink. Avoid sending sensitive or untrusted data to network or execution commands.", "analyzer": "behavioral", "metadata": { "source_var": "SUBNET_ID", "source_line": 7, "sink_command": "source", "taints": [ "COMMAND_OUTPUT" ], "behavior_category": "command_injection", "from_code_block": true, "block_language": "bash", "aitech": "AITech-8.2", "aitech_name": "Data Exfiltration / Exposure", "aisubtech": "AISubtech-8.2.3", "aisubtech_name": "Data Exfiltration via Agent Tooling", "aitech_mappings": [ "OWASP: LLM02:2026: Sensitive Information Disclosure", "OWASP: ASI09: Human-Agent Trust Exploitation", "MITRE ATLAS: AML.T0024.000: Exfiltration via AI Inference API: Infer Training Data Membership", "MITRE ATLAS: AML.T0035: AI Artifact Collection", "MITRE ATLAS: AML.T0037: Data From Local System", "MITRE ATLAS: AML.T0057: LLM Data Leakage", "NIST AML: NISTAML.037: Training Data Attacks" ], "aisubtech_mappings": [ "OWASP: LLM02:2026: Sensitive Information Disclosure", "OWASP: ASI02: Tool Misuse & Exploitation", "OWASP: ASI09: Human-Agent Trust Exploitation", "MITRE ATLAS: AML.T0086: Exfiltration via AI Agent Tool Invocation", "NIST AML: N/A" ], "framework_mappings": [ "OWASP: LLM02:2026: Sensitive Information Disclosure", "OWASP: ASI02: Tool Misuse & Exploitation", "OWASP: ASI09: Human-Agent Trust Exploitation", "MITRE ATLAS: AML.T0086: Exfiltration via AI Agent Tool Invocation", "NIST AML: N/A" ], "taxonomy_status": "mapped", "taxonomy_source": "rule" } }, { "id": "BASH_TAINT_bbdb1dd521", "rule_id": "BEHAVIOR_BASH_TAINT_FLOW", "category": "data_exfiltration", "severity": "MEDIUM", "title": "Bash: tainted data flows to dangerous sink", "description": "Variable $FQDN (line 2) flows to `curl` at line 3.", "file_path": "references/services/container-apps/fargate-deployment-guide.md", "line_number": 199, "snippet": "curl -f -I \"https://$FQDN/health\" || { echo \"Health check failed\"; exit 1; }", "remediation": "Review the data flow from source to sink. Avoid sending sensitive or untrusted data to network or execution commands.", "analyzer": "behavioral", "metadata": { "source_var": "FQDN", "source_line": 2, "sink_command": "curl", "taints": [ "COMMAND_OUTPUT" ], "behavior_category": "command_injection", "from_code_block": true, "block_language": "bash", "aitech": "AITech-8.2", "aitech_name": "Data Exfiltration / Exposure", "aisubtech": "AISubtech-8.2.3", "aisubtech_name": "Data Exfiltration via Agent Tooling", "aitech_mappings": [ "OWASP: LLM02:2026: Sensitive Information Disclosure", "OWASP: ASI09: Human-Agent Trust Exploitation", "MITRE ATLAS: AML.T0024.000: Exfiltration via AI Inference API: Infer Training Data Membership", "MITRE ATLAS: AML.T0035: AI Artifact Collection", "MITRE ATLAS: AML.T0037: Data From Local System", "MITRE ATLAS: AML.T0057: LLM Data Leakage", "NIST AML: NISTAML.037: Training Data Attacks" ], "aisubtech_mappings": [ "OWASP: LLM02:2026: Sensitive Information Disclosure", "OWASP: ASI02: Tool Misuse & Exploitation", "OWASP: ASI09: Human-Agent Trust Exploitation", "MITRE ATLAS: AML.T0086: Exfiltration via AI Agent Tool Invocation", "NIST AML: N/A" ], "framework_mappings": [ "OWASP: LLM02:2026: Sensitive Information Disclosure", "OWASP: ASI02: Tool Misuse & Exploitation", "OWASP: ASI09: Human-Agent Trust Exploitation", "MITRE ATLAS: AML.T0086: Exfiltration via AI Agent Tool Invocation", "NIST AML: N/A" ], "taxonomy_status": "mapped", "taxonomy_source": "rule" } }, { "id": "BASH_TAINT_dec1801f08", "rule_id": "BEHAVIOR_BASH_TAINT_FLOW", "category": "data_exfiltration", "severity": "MEDIUM", "title": "Bash: tainted data flows to dangerous sink", "description": "Variable $LOG_ID (line 5) flows to `source` at line 7.", "file_path": "references/services/container-apps/spring-deployment-guide.md", "line_number": 13, "snippet": "az containerapp env create --name spring-env --resource-group spring-rg --location eastus --logs-workspace-id \"$LOG_ID\" --logs-workspace-key \"$LOG_KEY\"", "remediation": "Review the data flow from source to sink. Avoid sending sensitive or untrusted data to network or execution commands.", "analyzer": "behavioral", "metadata": { "source_var": "LOG_ID", "source_line": 5, "sink_command": "source", "taints": [ "COMMAND_OUTPUT" ], "behavior_category": "command_injection", "from_code_block": true, "block_language": "bash", "aitech": "AITech-8.2", "aitech_name": "Data Exfiltration / Exposure", "aisubtech": "AISubtech-8.2.3", "aisubtech_name": "Data Exfiltration via Agent Tooling", "aitech_mappings": [ "OWASP: LLM02:2026: Sensitive Information Disclosure", "OWASP: ASI09: Human-Agent Trust Exploitation", "MITRE ATLAS: AML.T0024.000: Exfiltration via AI Inference API: Infer Training Data Membership", "MITRE ATLAS: AML.T0035: AI Artifact Collection", "MITRE ATLAS: AML.T0037: Data From Local System", "MITRE ATLAS: AML.T0057: LLM Data Leakage", "NIST AML: NISTAML.037: Training Data Attacks" ], "aisubtech_mappings": [ "OWASP: LLM02:2026: Sensitive Information Disclosure", "OWASP: ASI02: Tool Misuse & Exploitation", "OWASP: ASI09: Human-Agent Trust Exploitation", "MITRE ATLAS: AML.T0086: Exfiltration via AI Agent Tool Invocation", "NIST AML: N/A" ], "framework_mappings": [ "OWASP: LLM02:2026: Sensitive Information Disclosure", "OWASP: ASI02: Tool Misuse & Exploitation", "OWASP: ASI09: Human-Agent Trust Exploitation", "MITRE ATLAS: AML.T0086: Exfiltration via AI Agent Tool Invocation", "NIST AML: N/A" ], "taxonomy_status": "mapped", "taxonomy_source": "rule" } }, { "id": "BASH_TAINT_8f74be970a", "rule_id": "BEHAVIOR_BASH_TAINT_FLOW", "category": "data_exfiltration", "severity": "MEDIUM", "title": "Bash: tainted data flows to dangerous sink", "description": "Variable $FQDN (line 1) flows to `curl` at line 3.", "file_path": "references/services/container-apps/spring-deployment-guide.md", "line_number": 238, "snippet": "curl \"https://${FQDN}/actuator/health\"", "remediation": "Review the data flow from source to sink. Avoid sending sensitive or untrusted data to network or execution commands.", "analyzer": "behavioral", "metadata": { "source_var": "FQDN", "source_line": 1, "sink_command": "curl", "taints": [ "COMMAND_OUTPUT" ], "behavior_category": "command_injection", "from_code_block": true, "block_language": "bash", "aitech": "AITech-8.2", "aitech_name": "Data Exfiltration / Exposure", "aisubtech": "AISubtech-8.2.3", "aisubtech_name": "Data Exfiltration via Agent Tooling", "aitech_mappings": [ "OWASP: LLM02:2026: Sensitive Information Disclosure", "OWASP: ASI09: Human-Agent Trust Exploitation", "MITRE ATLAS: AML.T0024.000: Exfiltration via AI Inference API: Infer Training Data Membership", "MITRE ATLAS: AML.T0035: AI Artifact Collection", "MITRE ATLAS: AML.T0037: Data From Local System", "MITRE ATLAS: AML.T0057: LLM Data Leakage", "NIST AML: NISTAML.037: Training Data Attacks" ], "aisubtech_mappings": [ "OWASP: LLM02:2026: Sensitive Information Disclosure", "OWASP: ASI02: Tool Misuse & Exploitation", "OWASP: ASI09: Human-Agent Trust Exploitation", "MITRE ATLAS: AML.T0086: Exfiltration via AI Agent Tool Invocation", "NIST AML: N/A" ], "framework_mappings": [ "OWASP: LLM02:2026: Sensitive Information Disclosure", "OWASP: ASI02: Tool Misuse & Exploitation", "OWASP: ASI09: Human-Agent Trust Exploitation", "MITRE ATLAS: AML.T0086: Exfiltration via AI Agent Tool Invocation", "NIST AML: N/A" ], "taxonomy_status": "mapped", "taxonomy_source": "rule" } } ], "scan_duration_seconds": 0.15415382385253906, "duration_ms": 154, "analyzers_used": [ "static_analyzer", "bytecode", "pipeline", "correlation", "behavioral_analyzer", "trigger_analyzer" ], "timestamp": "2026-10-22T04:35:58.878697+00:00", "scan_metadata": { "policy_name": "default", "policy_version": "1.0", "policy_preset_base": "balanced", "policy_fingerprint_sha256": "3f48e661bfbc54597f97bbf3dcf2c1cbae2f596ddc79c0b44784efea326b3d1d", "cel": { "mode": "shadow", "runtime": "cel-go", "runtime_version": "v0.32.0;helper=2.3.1", "fact_schema": "v1", "expression_set_hash": "f26459b8f4a46a974d7ab0aaae34127b5b6a40d693e266e12fca03a69a6d26aa", "evaluated": 0, "retained": 8, "would_suppress": 0, "suppressed": 0, "fallbacks": 0, "projection_incomplete": 0, "elapsed_ms": 0.0, "projection_ms": 0.0, "evaluation_ms": 0.0, "errors": [], "per_rule": {}, "suppressed_candidates": [] }, "rule_contract": { "status": "passed", "schema_version": 2, "checked": 8, "invalid_findings": 0, "errors": [] }, "taxonomy": { "source": "builtin", "version": "2.0.0", "name": "Cisco AI Security and Safety Taxonomy", "revision": "655a343ac943a51b6f61f86e47156e7752c15dc6", "snapshot_sha256": "413e8ce9081e6d91b78aaa0d0b1c06cdc15d0406ad319e23e9f9f4f80735c441", "findings": { "mapped": 8, "not_applicable": 0, "unmapped": 0 } } }, "scanner_version": "2.3.1", "source": "microsoft", "repo_url": "https://github.com/microsoft/azure-skills" }