15Low
The skill exhibits a potential supply chain risk by referencing external documentation that is missing from the package, which could lead to unauthorized content injection or runtime execution errors.
Skill Info
Namemicrosoft/azure-skills/azure-resource-lookup
Registrygithub
Version206ad20914b6
PURLpkg:github/microsoft/azure-skills@206ad20914b6?skill=azure-resource-lookup
Stars1,222
Installs401,300
Source
Install
GitHub
401,100 installs
Skills.shDocs
npx skills add https://github.com/microsoft/azure-skillsAssessments (1)
AI Agent Traps ↗Referenced file missing from skill packagelowpolicy violation
SKILL.md links to "references/azure-resource-graph.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime
90% confidence
[Azure Resource Graph Query Patterns](references/azure-resource-graph.md)
Badge
Markdown
[](https://mondoo.com/ai-agent-security/skills/github/microsoft/azure-skills/azure-resource-lookup)HTML
<a href="https://mondoo.com/ai-agent-security/skills/github/microsoft/azure-skills/azure-resource-lookup"><img src="https://mondoo.com/ai-agent-security/api/badge/github/microsoft/azure-skills/azure-resource-lookup.svg" alt="Mondoo Skill Check" /></a>Image URL
https://mondoo.com/ai-agent-security/api/badge/github/microsoft/azure-skills/azure-resource-lookup.svgSecure your AI agents
Skills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.
- Continuous scanning of skills across all registries
- Policy enforcement before skills reach your agents
- Integration with your existing security workflow