The skill is vulnerable to path traversal
Claims to do
Azure Cloud Migrate: > This skill handles **assessment and code migration** of existing cloud workloads to Azure.
Actually does
The skill creates a new directory (`<source-folder>-azure/`), analyzes source code/configuration from a provided source folder, and generates an assessment report. It then converts code and configuration based on scenario-specific guides (e.g., AWS Lambda to Azure Functions, GCP Cloud Run to Azure Container Apps). It uses `mcp_azure_mcp_get_bestpractices` and `mcp_azure_mcp_documentation` tools for guidance and documentation.
/plugin marketplace add microsoft/azure-skills/plugin install azure-cloud-migrate@microsoft/azure-skillsgemini extensions install https://github.com/microsoft/azure-skills.git --consentnpx skills add https://github.com/microsoft/azure-skillsThe skill explicitly loads and follows rules from multiple external Markdown reference files. If these files are compromised, an attacker could inject malicious instructions, alter migration logic, or bypass security controls.
Load the scenario reference and follow its rules; [global-rules](references/services/functions/global-rules.md)
The skill creates an output directory using `<source-folder>-azure/`. If `<source-folder>` is derived from untrusted input and not sanitized, an attacker could use path traversal sequences to write files outside the intended workspace.
All output goes to `<source-folder>-azure/` at workspace root. Never modify the source directory. Create `<source-folder>-azure/` at workspace root
The skill performs 'Convert code/config' using scenario-specific migration guides. Depending on the implementation, this process could involve executing external scripts or vulnerable templating engines, leading to arbitrary command execution.
Migrate — Convert code/config using scenario-specific migration guide
The skill explicitly hands off control to another skill, `azure-prepare`. If `azure-prepare` is compromised or manipulated, it could lead to cascading failures or unauthorized actions leveraging its capabilities.
Hand off to azure-prepare for infrastructure, testing, and deployment
[](https://mondoo.com/ai-agent-security/skills/github/microsoft/azure-skills/azure-cloud-migrate)<a href="https://mondoo.com/ai-agent-security/skills/github/microsoft/azure-skills/azure-cloud-migrate"><img src="https://mondoo.com/ai-agent-security/api/badge/github/microsoft/azure-skills/azure-cloud-migrate.svg" alt="Mondoo Skill Check" /></a>https://mondoo.com/ai-agent-security/api/badge/github/microsoft/azure-skills/azure-cloud-migrate.svgSkills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.