40Medium
The skill misrepresents its capabilities, claiming full
Behavior Analysis
Mismatch detected — The skill claims to handle all Azure Storage services (Blob, File Shares, Queue, Table, Data Lake) and 'provides' their functionalities. However, the operational MCP tools and CLI commands are almost exclusively limited to Blob storage operations (listing accounts/containers/blobs, uploading/downloading blobs), with no direct operational commands for File Shares, Queue Storage, Table Storage, or Data Lake.
Claims to do
Azure Storage Services: | Service | Use When | MCP Tools | CLI | |---------|----------|-----------|-----| | Blob Storage | Objects, files, backups, static content | `azure__storage` | `az storage blob` | | File Shares | SMB file shares, lift-and-shift | - | `az storage file` | | Queue Storage | Async messaging, task queues | - | `az storage queue` | | Table Storage | NoSQL key-value (consider Cosmos DB) | - | `az storage table` | | Data Lake | Big data analytics, hierarchical namespace | - | `az storage fs` |
Actually does
The skill uses the `azure__storage` MCP tool or `az storage` CLI commands to list Azure storage accounts, containers, and blobs, and to upload or download blob content. It also provides informational text and links to Microsoft documentation for various Azure Storage services and SDKs.
Skill Info
Namemicrosoft/azure-skills/azure-storage
Registrygithub
Versioneb84d07b5490
PURLpkg:github/microsoft/azure-skills@eb84d07b5490?skill=azure-storage
Stars849
Installs292,700
Source
SHA-2560bb1208ef49f...
SHA-16c12a5b65bd7...
MD57e7cb49dd89b...
TLSH46a1464d2e52...
ssdeep96:il04DDu0H...
Size4,898 bytes
Install
This skill has been flagged as potentially malicious. Review the findings below before installing.
Assessments (1)
AI Agent Traps ↗Description Mismatchmediumdescription mismatch
The skill claims to handle all Azure Storage services (Blob, File Shares, Queue, Table, Data Lake) and 'provides' their functionalities. However, the operational MCP tools and CLI commands are almost exclusively limited to Blob storage operations (listing accounts/containers/blobs, uploading/downloading blobs), with no direct operational commands for File Shares, Queue Storage, Table Storage, or Data Lake.
85% confidence
The 'MCP Server (Preferred)' and 'CLI Fallback' sections only list commands for `storage_account`, `storage_container`, and `storage_blob` operations, despite the skill's description and 'Services' table implying broader operational capabilities across all storage types.
Version History (2)
Badge
Markdown
[](https://mondoo.com/ai-agent-security/skills/github/microsoft/azure-skills/azure-storage)HTML
<a href="https://mondoo.com/ai-agent-security/skills/github/microsoft/azure-skills/azure-storage"><img src="https://mondoo.com/ai-agent-security/api/badge/github/microsoft/azure-skills/azure-storage.svg" alt="Mondoo Skill Check" /></a>Image URL
https://mondoo.com/ai-agent-security/api/badge/github/microsoft/azure-skills/azure-storage.svgSecure your AI agents
Skills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.
- Continuous scanning of skills across all registries
- Policy enforcement before skills reach your agents
- Integration with your existing security workflow