The skill is vulnerable to command
Claims to do
Azure Resource Lookup: List, find, and discover Azure resources of any type across subscriptions and resource groups. Use Azure Resource Graph (ARG) for fast, cross-cutting queries when dedicated MCP tools don't cover the resource type.
Actually does
This skill primarily uses the `az graph query` command, often generated by `mcp_azure_mcp_extension_cli_generate`, to query Azure Resource Graph. It also leverages `mcp_azure_mcp_subscription_list` and `mcp_azure_mcp_group_list` to discover subscription and resource group scopes. It accesses Azure resource metadata to list, find, and discover various Azure resources across subscriptions and resource groups.
npx skills add https://github.com/microsoft/github-copilot-for-azureThe skill generates `az graph query` commands using user intent to construct KQL. This creates a command injection vulnerability if the `extension_cli_generate` tool does not properly sanitize or escape user input, potentially allowing arbitrary shell commands or malicious KQL execution.
az graph query -q "<KQL>", mcp_azure_mcp_extension_cli_generate intent: "query Azure Resource Graph to <user's request>"
The skill's primary function is to list and discover Azure resources across subscriptions and resource groups, providing broad reconnaissance capabilities. While intended, this functionality could be leveraged by an attacker to map out an environment.
List, find, and discover Azure resources; mcp_azure_mcp_subscription_list; mcp_azure_mcp_group_list
[](https://mondoo.com/ai-agent-security/skills/github/microsoft/github-copilot-for-azure/azure-resource-lookup)<a href="https://mondoo.com/ai-agent-security/skills/github/microsoft/github-copilot-for-azure/azure-resource-lookup"><img src="https://mondoo.com/ai-agent-security/api/badge/github/microsoft/github-copilot-for-azure/azure-resource-lookup.svg" alt="Mondoo Skill Check" /></a>https://mondoo.com/ai-agent-security/api/badge/github/microsoft/github-copilot-for-azure/azure-resource-lookup.svgSkills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.