The Azure Resource Lookup skill allows arbitrary shell command injection through unsanitized user intent
Claims to do
Azure Resource Lookup: List, find, and discover Azure resources of any type across subscriptions and resource groups. Use Azure Resource Graph (ARG) for fast, cross-cutting queries when dedicated MCP tools don't cover the resource type.
Actually does
The skill primarily uses `extension_cli_generate` to construct and execute `az graph query` commands against Azure Resource Graph (ARG) to retrieve metadata about Azure resources. It also leverages `mcp_azure_mcp_subscription_list` and `mcp_azure_mcp_group_list` to scope queries, and can route to other specific `az` CLI commands for single-resource-type lookups when full coverage is available.
/plugin marketplace add microsoft/azure-skills/plugin install azure-resource-lookup@microsoft/azure-skillsgemini extensions install https://github.com/microsoft/azure-skills.git --consentnpx skills add https://github.com/microsoft/azure-skills --skill azure-resource-lookupThe skill uses `extension_cli_generate` to convert user `intent` into `az` CLI commands. If the user's request within the `intent` is not properly sanitized, it could lead to arbitrary shell command injection.
mcp_azure_mcp_extension_cli_generate intent: "query Azure Resource Graph to <user's request>" cli-type: "az"
If command injection is possible through the `extension_cli_generate` tool, an attacker could leverage it to exfiltrate sensitive data from the agent's execution environment.
az graph query -q "<KQL>" --query "data[].{name:name, type:type, rg:resourceGroup}" -o table[](https://mondoo.com/ai-agent-security/skills/github/microsoft/azure-skills/azure-resource-lookup)<a href="https://mondoo.com/ai-agent-security/skills/github/microsoft/azure-skills/azure-resource-lookup"><img src="https://mondoo.com/ai-agent-security/api/badge/github/microsoft/azure-skills/azure-resource-lookup.svg" alt="Mondoo Skill Check" /></a>https://mondoo.com/ai-agent-security/api/badge/github/microsoft/azure-skills/azure-resource-lookup.svgSkills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.