Azure Quotas - Service Limits & Capacity Management
View on GitHub↗40Medium
This skill performs Azure resource reconnaissance and administrative actions, posing
Behavior Analysis
Description verified — behavior matches claim
Claims to do
Azure Quotas - Service Limits & Capacity Management: > **AUTHORITATIVE GUIDANCE** — Follow these instructions exactly for quota management and capacity validation.
Actually does
This skill primarily uses the Azure CLI `az quota` extension to list, show, and update Azure subscription quotas and usage across various resource providers. It guides users to install the extension, discover quota resource names, and execute commands to check limits, compare regional capacity, and request quota increases, while explicitly discouraging the use of the Azure Portal or REST API as primary tools.
Skill Info
Namemicrosoft/azure-skills/azure-quotas
Registrygithub
Version992cd5d3a770
PURLpkg:github/microsoft/azure-skills@992cd5d3a770?skill=azure-quotas
Stars849
Installs267,700
Source
SHA-256083ffb5d847c...
SHA-138897ca0a54c...
MD5636e98705194...
TLSH0a32a7e69f56...
ssdeep192:jzul0b+D...
Size11,324 bytes
Install
This skill has been flagged as potentially malicious. Review the findings below before installing.
Assessments (2)
AI Agent Traps ↗Cloud identity probing — discovers cloud account identity or queries instance metadatalowreconnaissance
Cloud identity probing — discovers cloud account identity or queries instance metadata
100% confidenceline 225
az account show
Execution of Azure CLI commandsmediumcommand execution
The skill's core functionality involves executing Azure CLI commands, including administrative actions like installing extensions, registering providers, and modifying resource quotas. This grants significant control over Azure resources.
100% confidenceline 222
az extension add --name quota, az quota update, az provider register --namespace Microsoft.Quota
Potential for command injection via placeholdersmediumcommand execution
The skill provides `bash` command examples with placeholders (e.g., `<subscription-id>`). If an agent populates these from untrusted user input without proper sanitization, it could lead to command injection.
80% confidenceline 108
az quota list --scope /subscriptions/<subscription-id>/providers/Microsoft.Compute/locations/eastus
Reconnaissance capability via CLI commandslowreconnaissance
The skill instructs the agent to use Azure CLI commands like `az quota list` and `az account show` to enumerate Azure resources and subscription details, which constitutes a reconnaissance capability.
100% confidenceline 225
az quota list, az account show
Authoritative language for guidanceinfooversight evasion
The skill uses highly authoritative and directive language to enforce specific tool usage and workflows. While intended for best practices in this context, such patterns could be used to manipulate agent reasoning in other scenarios.
90% confidenceline 13
> **AUTHORITATIVE GUIDANCE** — Follow these instructions exactly for quota management and capacity validation.
Version History (2)
Badge
Markdown
[](https://mondoo.com/ai-agent-security/skills/github/microsoft/azure-skills/azure-quotas)HTML
<a href="https://mondoo.com/ai-agent-security/skills/github/microsoft/azure-skills/azure-quotas"><img src="https://mondoo.com/ai-agent-security/api/badge/github/microsoft/azure-skills/azure-quotas.svg" alt="Mondoo Skill Check" /></a>Image URL
https://mondoo.com/ai-agent-security/api/badge/github/microsoft/azure-skills/azure-quotas.svgSecure your AI agents
Skills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.
- Continuous scanning of skills across all registries
- Policy enforcement before skills reach your agents
- Integration with your existing security workflow