This skill executes powerful cloud commands and is vulnerable to
Claims to do
Azure Deploy: > **AUTHORITATIVE GUIDANCE — MANDATORY COMPLIANCE** > > **PREREQUISITE**: The **azure-validate** skill **MUST** be invoked and completed with status `Validated` BEFORE executing this skill.
Actually does
This skill reads `.azure/deployment-plan.md` to verify a `Validated` status and then executes Azure deployments. It runs commands such as `azd up`, `azd deploy`, `terraform apply`, `az deployment`, and `azd provision`. It also utilizes internal `mcp_azure_mcp_subscription_list`, `mcp_azure_mcp_group_list`, `mcp_azure_mcp_azd`, and `azure__role` tools for pre-checks, execution, and post-verification, and presents `https://` endpoint URLs.
The skill is designed to execute powerful cloud infrastructure commands (`azd up`, `azd deploy`, `terraform apply`, `az deployment`) which can create, modify, or delete resources. This is a core capability with high potential for abuse if inputs are compromised.
This skill runs azd up, azd deploy, terraform apply, and az deployment commands... MCP Tools: `mcp_azure_mcp_azd`
The skill's execution logic, including commands and parameters, is heavily dependent on external files like `.azure/deployment-plan.md` and 'recipes'. Compromise of these files could lead to arbitrary command execution or deployment of malicious infrastructure.
Read `.azure/deployment-plan.md`, verify status... Load Recipe — Based on `recipe.type` in `.azure/deployment-plan.md`... Execute Deploy — Follow recipe steps
The skill reports deployed endpoint URLs to the user. If the underlying deployment or the source of these URLs is compromised, the agent could present malicious or phishing URLs to the human overseer.
Report Results — Present deployed endpoint URLs to the user as fully-qualified `https://` links
[](https://mondoo.com/ai-agent-security/skills/github/microsoft/azure-skills/azure-deploy)<a href="https://mondoo.com/ai-agent-security/skills/github/microsoft/azure-skills/azure-deploy"><img src="https://mondoo.com/ai-agent-security/api/badge/github/microsoft/azure-skills/azure-deploy.svg" alt="Mondoo Skill Check" /></a>https://mondoo.com/ai-agent-security/api/badge/github/microsoft/azure-skills/azure-deploy.svgSkills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.