foundry-iq

SAFE max severity MEDIUMSkillSpector Do not install 100 registry microsoft last scanned 1 scan

Verdict safe, but 2 findings (1 medium, 1 low), mainly unauthorized tool use. Most recent scan 2026-10-22.

Findings2
Critical0
High0
Medium1
Low1
Analyzersstatic bytecode pipeline correlation behavioral trigger
Scanner version2.3.1

Second scanner: NVIDIA SkillSpector

VerdictDo not install 100
Score100 / 100
Issues50
CategoriesExcessive Agency Dangerous Code Execution Privilege Escalation
Version2.12.0 (static)

The two scanners disagree: Cisco found nothing and SkillSpector says do not install. One of them has a blind spot here; read the skill before trusting either. How the two scanners compare across the whole corpus: Two scanners, one corpus.

What this skill does

Foundry IQ knowledge bases. WHEN: make local or Blob documents searchable; create/diagnose KBs; triage unsupported connectors or multi-source KB creation/reconfiguration (even with classic-search terms); connect existing KB to agents (including multi-source KBs); create/reuse a Search service; retrieve from an existing knowledge base with citations; no brand words needed. Read its procedure before query/target questions. NOT: other KB providers, repository-file search, classic Azure AI Search index/query/app work with no Foundry IQ KB or connector request, generic agent creation.

Package
85 files, 1.2 MB
SKILL.md
380 words, 1 sections
Code
Python (40)
License
MIT
Compatibility
Azure

SKILL.md covers: Foundry IQ

Findings

MEDIUM Undeclared network usage Unauthorized Tool Usestatic

Skill code uses network libraries but doesn't declare network requirement

SKILL.md

Remediation: Declare network usage in compatibility field or remove network calls
LOW Script contacts a destination the documentation never mentions Unauthorized Tool Usestatic

Script contacts or configures 'schemas.openxmlformats.org' but the skill documentation never visibly mentions it. Undocumented network destinations can indicate behaviour the manifest and description do not disclose.

helpers/_document_adapters.py:23

Remediation: Document the destination in SKILL.md (or the manifest description) if it is intended, or remove the undisclosed network access. Organizations can list internal hosts in llm_analysis.trusted_reference_domains.

What is in the package

85 files, 1.2 MB. Show the list.
FileKindSize
SKILL.mddoc3.7 KB
agents/connect-hosted-toolbox.mddoc7.8 KB
agents/connect-hosted.mddoc7.8 KB
agents/connect-prompt-sdk-fallback.mddoc7.8 KB
agents/connect.mddoc7.8 KB
agents/create-missing-agent.mddoc7.8 KB
helpers/_blob_observation.pyscript4.4 KB
helpers/_blob_source_read.pyscript39 KB
helpers/_bootstrap_io.pyscript30 KB
helpers/_cleanup_dependencies.pyscript28 KB
helpers/_cleanup_receipts.pyscript14 KB
helpers/_common.pyscript36 KB
helpers/_document_adapters.pyscript15 KB
helpers/_document_limits.pyscript3.9 KB
helpers/_embedding.pyscript7.0 KB
helpers/_file_inventory.pyscript24 KB
helpers/_file_source_config.pyscript16 KB
helpers/_indexer_observation.pyscript7.1 KB
helpers/_initial_prompt.pyscript12 KB
helpers/_private_json.pyscript2.4 KB
helpers/_progress.pyscript12 KB
helpers/_prompt_read.pyscript18 KB
helpers/_search_read.pyscript6.0 KB
helpers/_source_readback.pyscript1.6 KB
helpers/blob-contracts.mddoc7.8 KB
helpers/blob-cu-contracts.mddoc7.8 KB
helpers/blob_inventory.pyscript17 KB
helpers/blob_recheck.pyscript65 KB
helpers/blob_source.pyscript36 KB
helpers/bootstrap-contracts.mddoc7.8 KB
helpers/bootstrap_azure.pyscript41 KB
helpers/cleanup_plan.pyscript41 KB
helpers/contracts.mddoc7.8 KB
helpers/cu_ingestion_auth.pyscript12 KB
helpers/document-assessment.mddoc7.8 KB
helpers/document_assess.pyscript14 KB
helpers/file-upload-recovery.mddoc7.8 KB
helpers/file_cu_canary.pyscript33 KB
helpers/file_cu_mi.pyscript9.6 KB
helpers/file_ingest.pyscript15 KB
helpers/file_source.pyscript32 KB
helpers/file_upload.pyscript54 KB
helpers/hosted_connect.pyscript31 KB
helpers/kb-contracts.mddoc7.8 KB
helpers/knowledge_base_retrieve.pyscript7.7 KB
helpers/model-discovery-contracts.mddoc7.8 KB
helpers/model-discovery-scopes.mddoc7.8 KB
helpers/model_discovery.pyscript24 KB
helpers/private-artifacts.mddoc7.2 KB
helpers/private_artifacts.pyscript4.8 KB
helpers/prompt_cleanup.pyscript22 KB
helpers/prompt_connect.pyscript62 KB
helpers/requirements-assessment.txtdoc103 B
helpers/retrieval-verification-contracts.mddoc7.8 KB
helpers/retrieval_verify.pyscript20 KB
helpers/search-intake-contracts.mddoc7.6 KB
helpers/search_intake.pyscript18 KB
helpers/search_reconcile.pyscript60 KB
helpers/source_vector.pyscript33 KB
helpers/throttle-recovery.mddoc5.0 KB
helpers/vector-contracts.mddoc7.8 KB
knowledge-bases/create.mddoc8.1 KB
knowledge-bases/retrieve.mddoc7.8 KB
knowledge-sources/create-azure-blob.mddoc7.8 KB
knowledge-sources/create-file.mddoc7.8 KB
lifecycle/cleanup.mddoc7.8 KB
references/abstention.mddoc1.0 KB
references/blob-binding-evidence.mddoc7.8 KB
references/blob-indexer-observation.mddoc7.7 KB
references/blob-ingestion-progress.mddoc6.5 KB
references/blob-readiness-recheck.mddoc7.8 KB
references/blob-vector-readiness.mddoc2.6 KB
references/bootstrap-azure.mddoc7.8 KB
references/content-fit.mddoc7.8 KB
references/cu-ingestion.mddoc7.8 KB
references/file-cu-canary.mddoc7.8 KB
references/intent-routing.mddoc7.7 KB
references/owner.mddoc2.1 KB
references/platform-contracts.mddoc7.7 KB
references/platform-interfaces.mddoc7.8 KB
references/resource-intake.mddoc7.8 KB
references/search-substrate.mddoc7.8 KB
references/standard-cu.mddoc7.8 KB
search-services/create.mddoc7.8 KB
troubleshooting/diagnose.mddoc8.7 KB

External hosts referenced

learn.microsoft.com search.azure.com github.com management.azure.com ai.azure.com svc.search.windows.net schemas.openxmlformats.org models.services.ai.azure.com storage.azure.com www.rfc-editor.org account.services.ai.azure.com cu.services.ai.azure.com ecma-international.org example.blob.core.windows.net example.dfs.core.windows.net models.openai.azure.com pypi.org www.itu.int

Hostnames that appear in the skill's files. Referencing a host is not a finding; compare against the findings above and the skill's stated purpose.

Environment variables referenced

TOOLBOX_ENDPOINT FOUNDRY_PROJECT_ENDPOINT

Package contents recorded 2026-10-22 at commit f49ac319a7d3. The scan above ran against the version current at scan time; the two can differ if the skill has since been updated.

What we checked

What we did not check

Sources

Related skills