70High
This skill executes powerful cloud deployment commands that can cause significant infrastructure changes or destruction if misused.
Behavior Analysis
Description verified — behavior matches claim
Claims to do
Azure Deploy: > **AUTHORITATIVE GUIDANCE — MANDATORY COMPLIANCE** > > **PREREQUISITE**: The **azure-validate** skill **MUST** be invoked and completed with status `Validated` BEFORE executing this skill.
Actually does
This skill reads `.azure/deployment-plan.md` to verify a `Validated` status, then executes Azure deployments using `azd up`, `azd deploy`, `terraform apply`, and `az deployment` commands. It leverages MCP tools (`mcp_azure_mcp_azd`, `mcp_azure_mcp_subscription_list`, `mcp_azure_mcp_group_list`, `azure__role`) to interact with Azure, perform RBAC checks, and verify deployment success, reporting `https://` endpoint URLs.
Skill Info
Namemicrosoft/github-copilot-for-azure/azure-deploy
Registrygithub
Version771a66600a0c
PURLpkg:github/microsoft/github-copilot-for-azure@771a66600a0c?skill=azure-deploy
Stars202
Installs154,300
Source
SHA-256daa23eea47cd...
SHA-1ddd753b4cb4f...
MD558a791c60e20...
TLSH42d1619a7b56...
ssdeep192:pfuQK+rU...
Size6,644 bytes
Install
This skill has been flagged as potentially malicious. Review the findings below before installing.
Skills.shDocs
npx skills add https://github.com/microsoft/github-copilot-for-azureAssessments (1)
AI Agent Traps ↗Cloud Command Execution Capabilityhighcommand execution
The skill is designed to execute powerful cloud deployment commands such as `azd up`, `azd deploy`, `terraform apply`, and `az deployment`. While intended for its core function, these commands can lead to significant infrastructure changes or destruction if misused.
100% confidenceline 3
This skill runs azd up, azd deploy, terraform apply, and az deployment commands with built-in error recovery.
Version History (2)
Badge
Markdown
[](https://mondoo.com/ai-agent-security/skills/github/microsoft/github-copilot-for-azure/azure-deploy)HTML
<a href="https://mondoo.com/ai-agent-security/skills/github/microsoft/github-copilot-for-azure/azure-deploy"><img src="https://mondoo.com/ai-agent-security/api/badge/github/microsoft/github-copilot-for-azure/azure-deploy.svg" alt="Mondoo Skill Check" /></a>Image URL
https://mondoo.com/ai-agent-security/api/badge/github/microsoft/github-copilot-for-azure/azure-deploy.svgSecure your AI agents
Skills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.
- Continuous scanning of skills across all registries
- Policy enforcement before skills reach your agents
- Integration with your existing security workflow