40Medium
The skill misrepresents its capabilities, claiming
Behavior Analysis
Mismatch detected — The skill's stated purpose claims support for Azure OpenAI and Document Intelligence, but the actual executable commands provided by the skill only cover Azure AI Search and Azure AI Speech. It overstates its direct operational capabilities.
Claims to do
Azure AI Services: | Service | Use When | MCP Tools | CLI | |---------|----------|-----------|-----| | AI Search | Full-text, vector, hybrid search | `azure__search` | `az search` | | Speech | Speech-to-text, text-to-speech | `azure__speech` | - | | OpenAI | GPT models, embeddings, DALL-E | - | `az cognitiveservices` | | Document Intelligence | Form extraction, OCR | - | - |
Actually does
This skill uses the `azure__search` tool to list, retrieve details of, and query Azure AI Search indexes. It also uses the `azure__speech` tool to perform speech-to-text transcription and text-to-speech synthesis. It relies on Azure MCP tools for these operations.
Skill Info
Namemicrosoft/github-copilot-for-azure/azure-ai
Registrygithub
Version4081320c2592
PURLpkg:github/microsoft/github-copilot-for-azure@4081320c2592?skill=azure-ai
Stars186
Installs103,800
Source
SHA-2566c670136a10f...
SHA-1bf8d6e252191...
MD5d2d8cd09e0a4...
TLSH8e61116f3c21...
Size3,268 bytes
Install
This skill has been flagged as potentially malicious. Review the findings below before installing.
GitHub
https://github.com/microsoft/github-copilot-for-azure/tree/main/skills/azure-ai103,800 installs
Skills.shDocs
npx skills add https://github.com/microsoft/github-copilot-for-azure --skill azure-aiAssessments (1)
AI Agent Traps ↗Description Mismatchmediumdescription mismatch
The skill's stated purpose claims support for Azure OpenAI and Document Intelligence, but the actual executable commands provided by the skill only cover Azure AI Search and Azure AI Speech. It overstates its direct operational capabilities.
85% confidence
Stated purpose includes 'OpenAI, Document Intelligence'. The 'MCP Server (Preferred)' section only lists commands for `azure__search` and `azure__speech`.
Version History (2)
Badge
Markdown
[](https://mondoo.com/ai-agent-security/skills/github/microsoft/github-copilot-for-azure/azure-ai)HTML
<a href="https://mondoo.com/ai-agent-security/skills/github/microsoft/github-copilot-for-azure/azure-ai"><img src="https://mondoo.com/ai-agent-security/api/badge/github/microsoft/github-copilot-for-azure/azure-ai.svg" alt="Mondoo Skill Check" /></a>Image URL
https://mondoo.com/ai-agent-security/api/badge/github/microsoft/github-copilot-for-azure/azure-ai.svgSecure your AI agents
Skills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.
- Continuous scanning of skills across all registries
- Policy enforcement before skills reach your agents
- Integration with your existing security workflow