azure-deploy

ISSUES FOUND max severity CRITICALSkillSpector Do not install 100 registry microsoft last scanned 2 scans

6 findings (1 critical, 5 medium), mainly data exfiltration, command injection. Most recent scan 2026-10-22.

Findings6
Critical1
High0
Medium5
Low0
Analyzersstatic bytecode pipeline correlation behavioral trigger
Scanner version2.3.1

Second scanner: NVIDIA SkillSpector

VerdictDo not install 100
Score100 / 100
Issues32
CategoriesPrivilege Escalation Excessive Agency analysis-evasion
Version2.12.0 (static)

Independent static run, no language model, over the same files as the Cisco scan above. How the two scanners compare across the whole corpus: Two scanners, one corpus.

What this skill does

Execute Azure deployments for ALREADY-PREPARED applications that have existing .azure/deployment-plan.md and infrastructure files. DO NOT use this skill when the user asks to CREATE a new application — use azure-prepare instead. This skill runs azd up, azd deploy, terraform apply, and az deployment commands with built-in error recovery. Requires .azure/deployment-plan.md from azure-prepare and validated status from azure-validate. WHEN: \"run azd up\", \"run azd deploy\", \"execute deployment\", \"push to production\", \"push to cloud\", \"go live\", \"ship it\", \"bicep deploy\",…

Package
41 files, 129 KB
SKILL.md
719 words, 7 sections
Code
PowerShell (2), Shell (2)
License
MIT

SKILL.md covers: Azure Deploy · Triggers · Rules · Steps · SDK Quick References · MCP Tools · References

Findings

CRITICAL Bash: sensitive data exfiltration via network Data Exfiltrationbehavioral

Variable $ENDPOINT (tainted at line 2: `ENDPOINT=$(azd env get-values | grep -E "SERVICE_.*_URI|.*_ENDPOINT" | head -1 | cut -d'=' -f2)`) flows to network sink `curl` at line 5. This sends sensitive data over the network.

references/recipes/azd/verify.md:26

curl -f "$ENDPOINT/health" || curl -f "$ENDPOINT"
Remediation: Review the data flow from source to sink. Avoid sending sensitive or untrusted data to network or execution commands.
MEDIUM Discovery and execution chain (find -exec) Command Injectionpipeline

The find command with -exec executes commands on discovered files. An attacker can use this to find and execute hidden malicious scripts. (found in documentation — may be instructional)

references/recipes/azd/ef-migrations.md:10

find . -type d -name "Migrations" 2>/dev/null
find . -name "*.csproj" -exec grep -l "Microsoft.EntityFrameworkCore" {} \;
Remediation: Review the command sequence for potential multi-step attacks. Ensure all steps are necessary and safe.
MEDIUM Bash: tainted data flows to dangerous sink Data Exfiltrationbehavioral

Variable $ENDPOINT (line 2) flows to `curl` at line 5.

references/recipes/azd/post-deployment.md:79

curl -f "$ENDPOINT/health" || echo "Health check failed"
Remediation: Review the data flow from source to sink. Avoid sending sensitive or untrusted data to network or execution commands.
MEDIUM Bash: tainted data flows to dangerous sink Data Exfiltrationbehavioral

Variable $ENDPOINT (line 2) flows to `curl` at line 8.

references/recipes/azd/post-deployment.md:82

curl -f "$ENDPOINT/api/test-db" || echo "Database connection failed"
Remediation: Review the data flow from source to sink. Avoid sending sensitive or untrusted data to network or execution commands.
MEDIUM Bash: tainted data flows to dangerous sink Data Exfiltrationbehavioral

Variable $RG_NAME (line 4) flows to `source` at line 12.

references/recipes/terraform/README.md:82

--resource-group $RG_NAME \
Remediation: Review the data flow from source to sink. Avoid sending sensitive or untrusted data to network or execution commands.
MEDIUM Bash: tainted data flows to dangerous sink Data Exfiltrationbehavioral

Variable $RG_NAME (line 4) flows to `source` at line 19.

references/recipes/terraform/README.md:89

--resource-group $RG_NAME \
Remediation: Review the data flow from source to sink. Avoid sending sensitive or untrusted data to network or execution commands.

What is in the package

41 files, 129 KB. Show the list.
FileKindSize
SKILL.mddoc6.5 KB
references/auth-best-practices.mddoc6.1 KB
references/global-rules.mddoc1.2 KB
references/live-role-verification.mddoc3.9 KB
references/pre-deploy-checklist.mddoc18 KB
references/region-availability.mddoc3.0 KB
references/troubleshooting.mddoc8.0 KB
references/recipes/README.mddoc431 B
references/sdk/azd-deployment.mddoc792 B
references/sdk/azure-identity-dotnet.mddoc941 B
references/sdk/azure-identity-java.mddoc1.2 KB
references/sdk/azure-identity-py.mddoc1.1 KB
references/sdk/azure-identity-ts.mddoc1.1 KB
references/recipes/azcli/README.mddoc1.7 KB
references/recipes/azcli/errors.mddoc492 B
references/recipes/azcli/verify.mddoc2.0 KB
references/recipes/azd/README.mddoc3.7 KB
references/recipes/azd/ef-migrations.mddoc5.0 KB
references/recipes/azd/errors.mddoc15 KB
references/recipes/azd/functions-deploy.mddoc3.5 KB
references/recipes/azd/post-deployment.mddoc4.2 KB
references/recipes/azd/sql-entra-auth.mddoc2.5 KB
references/recipes/azd/sql-managed-identity.mddoc7.4 KB
references/recipes/azd/verify.mddoc4.9 KB
references/recipes/bicep/README.mddoc2.4 KB
references/recipes/bicep/errors.mddoc511 B
references/recipes/bicep/verify.mddoc763 B
references/recipes/cicd/README.mddoc1.2 KB
references/recipes/cicd/errors.mddoc542 B
references/recipes/cicd/verify.mddoc754 B
references/recipes/terraform/README.mddoc3.2 KB
references/recipes/terraform/errors.mddoc858 B
references/recipes/terraform/verify.mddoc752 B
references/recipes/azd/scripts/apply-migrations.ps1script1.8 KB
references/recipes/azd/scripts/apply-migrations.shscript1.8 KB
references/recipes/azd/scripts/grant-and-migrate.ps1script4.2 KB
references/recipes/azd/scripts/grant-and-migrate.shscript4.3 KB
references/recipes/cicd/examples/azdo-azd.ymlconfig487 B
references/recipes/cicd/examples/azdo-multistage.ymlconfig831 B
references/recipes/cicd/examples/github-azd.ymlconfig782 B
references/recipes/cicd/examples/github-bicep.ymlconfig660 B

External hosts referenced

learn.microsoft.com myapp.azurewebsites.net aka.ms api-xxxx.azurecontainerapps.io apiservice.xxx.azurecontainerapps.io aspire-dashboard.xxx.azurecontainerapps.io azure.microsoft.com schema.management.azure.com

Hostnames that appear in the skill's files. Referencing a host is not a finding; compare against the findings above and the skill's stated purpose.

Environment variables referenced

SERVICE_API_NAME SQL_DATABASE AZURE_RESOURCE_GROUP APP_PROJECT_PATH AZURE_CONTAINER_REGISTRY_ENDPOINT AZURE_ENV_NAME ENDPOINT AZURE_CLIENT_ID AZURE_FUNCTIONS_ENVIRONMENT AZURE_PRINCIPAL_ID PRINCIPAL_ID AUTH_TYPE AZURE_CONTAINER_REGISTRY_MANAGED_IDENTITY_ID AZURE_LOCATION AZURE_SUBSCRIPTION_ID MANAGED_IDENTITY_CLIENT_ID ACR_ID ACR_PASS AZURE_TENANT_ID

Package contents recorded 2026-10-22 at commit f49ac319a7d3. The scan above ran against the version current at scan time; the two can differ if the skill has since been updated.

What we checked

What we did not check

Scan history

DateVerdictFindingsChangeAnalyzersRaw
CRITICAL 6 = static bytecode pipeline correlation behavioral trigger JSON
CRITICAL 6 first scan static bytecode pipeline correlation behavioral trigger JSON

Sources

Related skills