70High
User input directly generates KQL queries, enabling
Behavior Analysis
Description verified — behavior matches claim
Claims to do
Azure Resource Lookup: List, find, and discover Azure resources of any type across subscriptions and resource groups. Use Azure Resource Graph (ARG) for fast, cross-cutting queries when dedicated MCP tools don't cover the resource type.
Actually does
The skill primarily uses the Azure CLI `az graph query` command to query Azure Resource Graph (ARG) for resource metadata. It leverages `extension_cli_generate` to construct Kusto Query Language (KQL) queries and can use `mcp_azure_mcp_subscription_list` and `mcp_azure_mcp_group_list` to refine the query scope. It also instructs to install the `resource-graph` Azure CLI extension if needed.
Skill Info
Namemicrosoft/github-copilot-for-azure/azure-resource-lookup
Registrygithub
Version4081320c2592
PURLpkg:github/microsoft/github-copilot-for-azure@4081320c2592?skill=azure-resource-lookup
Stars202
Installs154,000
Source
SHA-256aa7ee717fbe8...
SHA-1b529ff60af0c...
MD54066841408b9...
TLSHe6b143478da6...
ssdeep96:QWh4D4T92...
Size5,216 bytes
Install
This skill has been flagged as potentially malicious. Review the findings below before installing.
Skills.shDocs
npx skills add https://github.com/microsoft/github-copilot-for-azureAssessments (1)
AI Agent Traps ↗KQL Injection via User Intent leading to Data Exfiltrationhighprompt injection, data exfiltration
User input (`user's request`) is directly used to generate KQL queries for `az graph query`. A vulnerability in KQL generation could allow injection, leading to unauthorized access and exfiltration of extensive Azure resource metadata.
90% confidenceline 79
mcp_azure_mcp_extension_cli_generate intent: "query Azure Resource Graph to <user's request>"
Resource Abuse via Complex KQL Queriesmediumresource abuse
Maliciously crafted KQL queries, if injected, could be designed to be overly complex or broad, consuming excessive Azure Resource Graph service resources and potentially impacting performance.
80% confidenceline 85
az graph query -q "<KQL>" --query "data[].{name:name, type:type, rg:resourceGroup}" -o tableVersion History (2)
Badge
Markdown
[](https://mondoo.com/ai-agent-security/skills/github/microsoft/github-copilot-for-azure/azure-resource-lookup)HTML
<a href="https://mondoo.com/ai-agent-security/skills/github/microsoft/github-copilot-for-azure/azure-resource-lookup"><img src="https://mondoo.com/ai-agent-security/api/badge/github/microsoft/github-copilot-for-azure/azure-resource-lookup.svg" alt="Mondoo Skill Check" /></a>Image URL
https://mondoo.com/ai-agent-security/api/badge/github/microsoft/github-copilot-for-azure/azure-resource-lookup.svgSecure your AI agents
Skills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.
- Continuous scanning of skills across all registries
- Policy enforcement before skills reach your agents
- Integration with your existing security workflow