azure-prepare

SAFE max severity MEDIUMSkillSpector Do not install 100 registry microsoft last scanned 2026-10-22 2 scans

Verdict safe, but 5 findings (4 medium, 1 low), mainly data exfiltration, policy violation, obfuscation. Most recent scan 2026-10-22.

Findings5

Critical0

High0

Medium4

Low1

Analyzersstatic bytecode pipeline correlation behavioral trigger

Scanner version2.3.1

Second scanner: NVIDIA SkillSpector

VerdictDo not install 100

Score100 / 100

Issues69

CategoriesPrivilege Escalation Tool Misuse MCP Rug Pull

Version2.12.0 (static)

The two scanners disagree: Cisco found nothing and SkillSpector says do not install. One of them has a blind spot here; read the skill before trusting either. How the two scanners compare across the whole corpus: Two scanners, one corpus.

What this skill does

Prepare azd-based Azure projects for deployment: generates azure.yaml, infrastructure (Bicep/Terraform), and Dockerfiles for the Azure Developer CLI (azd) workflow. USE ONLY when the user explicitly wants to use azd as the deployment tool, or the project already has an azure.yaml file. DO NOT USE FOR: non-azd deployments, Python App Service code-only deploys (use python-appservice-deploy), or cross-cloud migration (use azure-cloud-migrate). WHEN: prepare app for azd, create azure.yaml, set up azd infrastructure, modernize app for Azure with azd, deploy with azd, function app, timer trigger,…

Package: 166 files, 552 KB
SKILL.md: 1619 words, 11 sections
Code: PowerShell (1), Shell (1)
License: MIT

SKILL.md covers: Azure Prepare · Triggers · Rules · ❌ PLAN-FIRST WORKFLOW — MANDATORY · ❌ STEP 0: Specialized Technology Check — MANDATORY FIRST ACTION · Check 1: Prompt keywords · Phase 1: Planning (BLOCKING — Complete Before Any Execution) · Phase 2: Execution (Only After Plan Approval) · Outputs · SDK Quick References · Next

Findings

MEDIUM Deeply nested file references detected Obfuscationstatic

Skill has file references nested more than 5 levels deep. This could be an attempt to hide malicious content in files that are only loaded under specific conditions.

SKILL.md

Remediation: Flatten the reference structure or ensure all nested files are safe

MEDIUM Bash: tainted data flows to dangerous sink Data Exfiltrationbehavioral

Variable $id (line 2) flows to `source` at line 5.

references/services/app-service/networking.md:133

az network private-endpoint create --connection-name CONNECTIONNAME --name private-endpoint --private-connection-resource-id $id --resource-group RG --subnet SUBNET --group-id sites --vnet-name VNET

Remediation: Review the data flow from source to sink. Avoid sending sensitive or untrusted data to network or execution commands.

MEDIUM Bash: tainted data flows to dangerous sink Data Exfiltrationbehavioral

Variable $RG_NAME (line 4) flows to `source` at line 12.

references/services/container-apps/terraform.md:99

--resource-group $RG_NAME \

Remediation: Review the data flow from source to sink. Avoid sending sensitive or untrusted data to network or execution commands.

MEDIUM Bash: tainted data flows to dangerous sink Data Exfiltrationbehavioral

Variable $RG_NAME (line 4) flows to `source` at line 19.

references/services/container-apps/terraform.md:106

--resource-group $RG_NAME \

Remediation: Review the data flow from source to sink. Avoid sending sensitive or untrusted data to network or execution commands.

LOW Skill package contains many files Policy Violationstatic

Skill package contains 166 files. Large file counts increase attack surface and may indicate bundled dependencies or unnecessary content.

Remediation: Review file inventory and remove unnecessary files.

What is in the package

166 files, 552 KB. Show the list.

File	Kind	Size
`SKILL.md`	doc	13 KB
`references/analyze.md`	doc	4.0 KB
`references/apim.md`	doc	5.7 KB
`references/architecture.md`	doc	6.7 KB
`references/aspire.md`	doc	18 KB
`references/auth-best-practices.md`	doc	6.1 KB
`references/azure-context.md`	doc	5.7 KB
`references/functional-verification.md`	doc	3.2 KB
`references/generate.md`	doc	5.3 KB
`references/global-rules.md`	doc	2.0 KB
`references/plan-template.md`	doc	10 KB
`references/recipe-selection.md`	doc	3.2 KB
`references/region-availability.md`	doc	1.7 KB
`references/requirements.md`	doc	2.5 KB
`references/research.md`	doc	8.6 KB
`references/resources-limits-quotas.md`	doc	13 KB
`references/scan.md`	doc	3.0 KB
`references/security.md`	doc	8.5 KB
`references/specialized-routing.md`	doc	4.3 KB
`references/runtimes/nodejs.md`	doc	5.9 KB
`references/sdk/azd-deployment.md`	doc	792 B
`references/sdk/azure-appconfiguration-java.md`	doc	1.5 KB
`references/sdk/azure-appconfiguration-py.md`	doc	1.1 KB
`references/sdk/azure-appconfiguration-ts.md`	doc	1.2 KB
`references/sdk/azure-identity-dotnet.md`	doc	941 B
`references/sdk/azure-identity-java.md`	doc	1.2 KB
`references/sdk/azure-identity-py.md`	doc	1.1 KB
`references/sdk/azure-identity-ts.md`	doc	1.1 KB
`references/recipes/azcli/README.md`	doc	1.8 KB
`references/recipes/azcli/commands.md`	doc	1.6 KB
`references/recipes/azcli/scripts.md`	doc	2.2 KB
`references/recipes/azd/README.md`	doc	3.8 KB
`references/recipes/azd/aspire.md`	doc	8.9 KB
`references/recipes/azd/azure-yaml.md`	doc	6.7 KB
`references/recipes/azd/docker.md`	doc	2.0 KB
`references/recipes/azd/iac-rules.md`	doc	5.8 KB
`references/recipes/azd/terraform.md`	doc	14 KB
`references/recipes/bicep/README.md`	doc	1.4 KB
`references/recipes/bicep/patterns.md`	doc	3.0 KB
`references/recipes/terraform/README.md`	doc	2.5 KB
`references/recipes/terraform/patterns.md`	doc	3.5 KB
`references/services/aks/README.md`	doc	1.0 KB
`references/services/aks/addons.md`	doc	957 B
`references/services/aks/bicep.md`	doc	1.6 KB
`references/services/aks/manifests.md`	doc	1.4 KB
`references/services/app-insights/README.md`	doc	848 B
`references/services/app-service/README.md`	doc	2.3 KB
`references/services/app-service/bicep.md`	doc	4.2 KB
`references/services/app-service/custom-domains.md`	doc	4.8 KB
`references/services/app-service/deployment-slots.md`	doc	4.5 KB
`references/services/app-service/networking.md`	doc	6.6 KB
`references/services/app-service/scaling.md`	doc	1.5 KB
`references/services/app-service/sku-selection.md`	doc	4.7 KB
`references/services/container-apps/README.md`	doc	1.3 KB
`references/services/container-apps/bicep.md`	doc	4.8 KB
`references/services/container-apps/day2-operations.md`	doc	5.1 KB
`references/services/container-apps/environment.md`	doc	1.2 KB
`references/services/container-apps/health-probes.md`	doc	1.1 KB
`references/services/container-apps/networking.md`	doc	5.1 KB
`references/services/container-apps/revisions.md`	doc	4.9 KB
`references/services/container-apps/scaling.md`	doc	1.4 KB
`references/services/container-apps/terraform.md`	doc	6.1 KB
`references/services/cosmos-db/README.md`	doc	1.4 KB
`references/services/cosmos-db/bicep.md`	doc	1.8 KB
`references/services/cosmos-db/partitioning.md`	doc	1.1 KB
`references/services/cosmos-db/sdk.md`	doc	1.6 KB
`references/services/durable-task-scheduler/README.md`	doc	4.9 KB
`references/services/durable-task-scheduler/bicep.md`	doc	4.8 KB
`references/services/durable-task-scheduler/dotnet.md`	doc	6.1 KB
`references/services/durable-task-scheduler/java.md`	doc	7.7 KB
`references/services/durable-task-scheduler/javascript.md`	doc	5.6 KB
`references/services/durable-task-scheduler/python.md`	doc	6.4 KB
`references/services/event-grid/README.md`	doc	1.0 KB
`references/services/event-grid/bicep.md`	doc	1.7 KB
`references/services/event-grid/subscriptions.md`	doc	1.6 KB
`references/services/foundry/README.md`	doc	1.3 KB
`references/services/foundry/region-availability.md`	doc	826 B
`references/services/functions/README.md`	doc	3.1 KB
`references/services/functions/aspire-containerapps.md`	doc	3.3 KB
`references/services/functions/bicep.md`	doc	12 KB
`references/services/functions/cold-start.md`	doc	6.3 KB
`references/services/functions/durable.md`	doc	1.8 KB
`references/services/functions/hosting-plans.md`	doc	6.8 KB
`references/services/functions/terraform.md`	doc	13 KB
`references/services/key-vault/README.md`	doc	1.3 KB
`references/services/key-vault/bicep.md`	doc	1.7 KB
`references/services/key-vault/sdk.md`	doc	1.9 KB
`references/services/logic-apps/README.md`	doc	1.0 KB
`references/services/logic-apps/bicep.md`	doc	1.8 KB
`references/services/logic-apps/triggers.md`	doc	1.7 KB
`references/services/service-bus/README.md`	doc	1.4 KB
`references/services/service-bus/bicep.md`	doc	3.7 KB
`references/services/service-bus/patterns.md`	doc	4.2 KB
`references/services/sql-database/README.md`	doc	1.9 KB
`references/services/sql-database/auth.md`	doc	4.0 KB
`references/services/sql-database/bicep.md`	doc	7.8 KB
`references/services/sql-database/sdk.md`	doc	1.8 KB
`references/services/static-web-apps/README.md`	doc	1.3 KB
`references/services/static-web-apps/bicep.md`	doc	1.0 KB
`references/services/static-web-apps/deployment.md`	doc	1.8 KB
`references/services/static-web-apps/region-availability.md`	doc	674 B
`references/services/static-web-apps/routing.md`	doc	1.2 KB
`references/services/static-web-apps/terraform.md`	doc	3.5 KB
`references/services/storage/README.md`	doc	1.4 KB
`references/services/storage/access.md`	doc	3.6 KB
`references/services/storage/bicep.md`	doc	1.7 KB
`references/services/app-service/templates/selection.md`	doc	2.8 KB
`references/services/app-service/templates/web-api.md`	doc	4.9 KB
`references/services/app-service/templates/web-app.md`	doc	4.9 KB
`references/services/functions/templates/README.md`	doc	6.5 KB
`references/services/functions/templates/selection.md`	doc	4.3 KB
`references/services/sql-database/scripts/grant-sql-access.ps1`	script	3.4 KB
`references/services/sql-database/scripts/grant-sql-access.sh`	script	3.5 KB
`references/services/app-service/templates/recipes/README.md`	doc	2.8 KB
`references/services/app-service/templates/recipes/composition.md`	doc	4.8 KB
`references/services/functions/templates/recipes/README.md`	doc	1.1 KB
`references/services/functions/templates/recipes/composition.md`	doc	11 KB
`references/services/app-service/templates/recipes/auth/README.md`	doc	3.1 KB
`references/services/app-service/templates/recipes/cosmos/README.md`	doc	3.6 KB
`references/services/app-service/templates/recipes/redis/README.md`	doc	3.3 KB
`references/services/app-service/templates/recipes/sql/README.md`	doc	3.5 KB
`references/services/functions/templates/base/eval/python.md`	doc	762 B
`references/services/functions/templates/base/eval/summary.md`	doc	1.9 KB
`references/services/functions/templates/base/eval/typescript.md`	doc	1.1 KB
`references/services/functions/templates/recipes/blob-eventgrid/README.md`	doc	1.6 KB
`references/services/functions/templates/recipes/common/dotnet-entry-point.md`	doc	2.0 KB
`references/services/functions/templates/recipes/common/error-handling.md`	doc	2.2 KB
`references/services/functions/templates/recipes/common/health-check.md`	doc	2.7 KB
`references/services/functions/templates/recipes/common/nodejs-entry-point.md`	doc	4.1 KB
`references/services/functions/templates/recipes/cosmosdb/README.md`	doc	1.5 KB
`references/services/functions/templates/recipes/durable/README.md`	doc	1.8 KB
`references/services/functions/templates/recipes/eventhubs/README.md`	doc	1.2 KB
`references/services/functions/templates/recipes/mcp/README.md`	doc	1.9 KB
`references/services/functions/templates/recipes/servicebus/README.md`	doc	1.3 KB
`references/services/functions/templates/recipes/sql/README.md`	doc	1.8 KB
`references/services/functions/templates/recipes/timer/README.md`	doc	1.5 KB
`references/services/app-service/templates/recipes/auth/source/dotnet.md`	doc	1.3 KB
`references/services/app-service/templates/recipes/auth/source/nodejs.md`	doc	2.5 KB
`references/services/app-service/templates/recipes/auth/source/python.md`	doc	2.2 KB
`references/services/app-service/templates/recipes/cosmos/source/dotnet.md`	doc	1.3 KB
`references/services/app-service/templates/recipes/cosmos/source/nodejs.md`	doc	1.2 KB
`references/services/app-service/templates/recipes/cosmos/source/python.md`	doc	1.1 KB
`references/services/app-service/templates/recipes/redis/source/dotnet.md`	doc	1.6 KB
`references/services/app-service/templates/recipes/redis/source/nodejs.md`	doc	2.2 KB
`references/services/app-service/templates/recipes/redis/source/python.md`	doc	2.9 KB
`references/services/app-service/templates/recipes/sql/source/dotnet.md`	doc	2.9 KB
`references/services/app-service/templates/recipes/sql/source/nodejs.md`	doc	3.0 KB
`references/services/app-service/templates/recipes/sql/source/python.md`	doc	4.4 KB
`references/services/functions/templates/recipes/blob-eventgrid/eval/python.md`	doc	1.2 KB
`references/services/functions/templates/recipes/blob-eventgrid/eval/summary.md`	doc	2.6 KB
`references/services/functions/templates/recipes/cosmosdb/eval/python.md`	doc	1.2 KB
`references/services/functions/templates/recipes/cosmosdb/eval/summary.md`	doc	1.8 KB
`references/services/functions/templates/recipes/cosmosdb/eval/typescript.md`	doc	1.3 KB
`references/services/functions/templates/recipes/durable/eval/python.md`	doc	1.2 KB
`references/services/functions/templates/recipes/durable/eval/summary.md`	doc	1.6 KB
`references/services/functions/templates/recipes/eventhubs/eval/python.md`	doc	1.2 KB
`references/services/functions/templates/recipes/eventhubs/eval/summary.md`	doc	1.5 KB
`references/services/functions/templates/recipes/mcp/eval/python.md`	doc	1.2 KB
`references/services/functions/templates/recipes/mcp/eval/summary.md`	doc	1.5 KB
`references/services/functions/templates/recipes/servicebus/eval/python.md`	doc	1.3 KB
`references/services/functions/templates/recipes/servicebus/eval/summary.md`	doc	1.8 KB
`references/services/functions/templates/recipes/servicebus/eval/typescript.md`	doc	1.4 KB
`references/services/functions/templates/recipes/sql/eval/python.md`	doc	1.2 KB
`references/services/functions/templates/recipes/sql/eval/summary.md`	doc	2.8 KB
`references/services/functions/templates/recipes/timer/eval/python.md`	doc	1.2 KB
`references/services/functions/templates/recipes/timer/eval/summary.md`	doc	1.5 KB

External hosts referenced

learn.microsoft.com github.com cdn.functions.azure.com login.microsoftonline.com aspire.dev azure.github.io registry.terraform.io schema.management.azure.com azure.microsoft.com database.windows.net myvault.vault.azure.net redis.azure.com aka.ms api.github.com central.sonatype.com mcr.microsoft.com modelcontextprotocol.io my-api.azurecontainerapps.io myscheduler-abc123.westus2.durabletask.io portal.azure.com pypi.org raw.githubusercontent.com www.npmjs.com www.nuget.org

Hostnames that appear in the skill's files. Referencing a host is not a finding; compare against the findings above and the skill's stated purpose.

Environment variables referenced

AZURE_CLIENT_ID AZURE_APP_ID_URI AZURE_LOCATION AZURE_TENANT_ID AZURE_ENV_NAME AZURE_SUBSCRIPTION_ID AZURE_SQL_CONNECTION_STRING APPHOST_DIR AZURE_FUNCTIONS_ENVIRONMENT COSMOS_ENDPOINT PORT REDIS_HOST REDIS_PORT SQL_DATABASE AZURE_APPCONFIG_ENDPOINT AZURE_STORAGE_CONNECTION_STRING COSMOS_DATABASE_NAME DATABASE_URL EVENTGRID_TOPIC_ENDPOINT EVENTGRID_TOPIC_KEY KEY_VAULT_URL SERVICE_API_NAME SESSION_SECRET API_URL APPHOST_PROJECT APP_PUBLIC_HOSTNAME AZURE_CONTAINER_REGISTRY_ENDPOINT AZURE_KEY_VAULT_NAME AZURE_LOG_ANALYTICS_WORKSPACE_ID AZURE_PRINCIPAL_ID

Package contents recorded 2026-10-22 at commit f49ac319a7d3. The scan above ran against the version current at scan time; the two can differ if the skill has since been updated.

What we checked

Static analyzer. Pattern rules over SKILL.md and bundled files: known-bad commands, exfiltration URLs, secrets, obfuscation.
Bytecode analyzer.
Pipeline analyzer.
Correlation analyzer.
Behavioral analyzer. Checks what the skill asks the agent to do against what its description claims it does.
Trigger analyzer. Looks for instructions that fire on conditions the user did not ask for.

What we did not check

Runtime behaviour. The skill was not executed; findings come from reading its files.
Anything fetched at install or run time, including remote scripts, package dependencies, and URLs the skill tells the agent to open.
Content the analyzers cannot read: images, binaries, and some non-English text.
Known scanner bypass classes. See the methodology and limitations page.

Scan history

Date	Verdict	Findings	Change	Analyzers	Raw
2026-10-22	SAFE	5	=	static bytecode pipeline correlation behavioral trigger	JSON
2026-10-22	SAFE	5	first scan	static bytecode pipeline correlation behavioral trigger	JSON

Sources

Repository: https://github.com/microsoft/azure-skills
Raw scan result: microsoft-azure-skills-skills-azure-prepare-scan.json
Badge for your README: ![skillscan.io](https://skillscan.io/badge/microsoft-azure-prepare.svg)
Request a re-scan

Second scanner: NVIDIA SkillSpector

What this skill does

Findings

What is in the package

External hosts referenced

Environment variables referenced

What we checked

What we did not check

Scan history

Sources

Related skills