40Medium
The skill misrepresents its Azure service support,
Behavior Analysis
Mismatch detected — The skill's description and 'Services' table claim support for Azure OpenAI and Document Intelligence, but the implemented 'MCP Server (Preferred)' section only provides concrete commands for Azure AI Search and Azure AI Speech.
Claims to do
Azure AI Services: | Service | Use When | MCP Tools | CLI | |---------|----------|-----------|-----| | AI Search | Full-text, vector, hybrid search | `azure__search` | `az search` | | Speech | Speech-to-text, text-to-speech | `azure__speech` | - | | OpenAI | GPT models, embeddings, DALL-E | - | `az cognitiveservices` | | Document Intelligence | Form extraction, OCR | - | - |
Actually does
The skill uses `azure__search` to list, get details of, and query Azure AI Search indexes. It also uses `azure__speech` to transcribe speech to text and synthesize text to speech. These operations are performed via specified MCP tools.
Skill Info
Namemicrosoft/github-copilot-for-azure/azure-ai
Registrygithub
Versionc4ea0f4e6395
PURLpkg:github/microsoft/github-copilot-for-azure@c4ea0f4e6395?skill=azure-ai
Stars186
Installs103,800
Source
SHA-2566c670136a10f...
SHA-1bf8d6e252191...
MD5d2d8cd09e0a4...
TLSH8e61116f3c21...
Size3,268 bytes
Install
This skill has been flagged as potentially malicious. Review the findings below before installing.
Assessments (1)
AI Agent Traps ↗Description Mismatchmediumdescription mismatch
The skill's description and 'Services' table claim support for Azure OpenAI and Document Intelligence, but the implemented 'MCP Server (Preferred)' section only provides concrete commands for Azure AI Search and Azure AI Speech.
85% confidence
The 'Services' table lists OpenAI and Document Intelligence, but the 'MCP Server (Preferred)' section only defines commands for `azure__search` and `azure__speech`.
Version History (2)
Badge
Markdown
[](https://mondoo.com/ai-agent-security/skills/github/microsoft/github-copilot-for-azure/azure-ai)HTML
<a href="https://mondoo.com/ai-agent-security/skills/github/microsoft/github-copilot-for-azure/azure-ai"><img src="https://mondoo.com/ai-agent-security/api/badge/github/microsoft/github-copilot-for-azure/azure-ai.svg" alt="Mondoo Skill Check" /></a>Image URL
https://mondoo.com/ai-agent-security/api/badge/github/microsoft/github-copilot-for-azure/azure-ai.svgSecure your AI agents
Skills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.
- Continuous scanning of skills across all registries
- Policy enforcement before skills reach your agents
- Integration with your existing security workflow