100Critical
The skill is vulnerable to command
Behavior Analysis
Description verified — behavior matches claim
Claims to do
Azure Resource Lookup: List, find, and discover Azure resources of any type across subscriptions and resource groups. Use Azure Resource Graph (ARG) for fast, cross-cutting queries when dedicated MCP tools don't cover the resource type.
Actually does
This skill primarily uses the `az graph query` command, often generated by `mcp_azure_mcp_extension_cli_generate`, to query Azure Resource Graph. It also leverages `mcp_azure_mcp_subscription_list` and `mcp_azure_mcp_group_list` to discover subscription and resource group scopes. It accesses Azure resource metadata to list, find, and discover various Azure resources across subscriptions and resource groups.
Skill Info
Namemicrosoft/github-copilot-for-azure/azure-resource-lookup
Registrygithub
Version771a66600a0c
PURLpkg:github/microsoft/github-copilot-for-azure@771a66600a0c?skill=azure-resource-lookup
Stars202
Installs154,000
Source
SHA-256ee48fd5dedd8...
SHA-1058c7ac8604a...
MD56ccf885a62d9...
TLSH77c144478da6...
ssdeep96:oh4MW4T92...
Size5,646 bytes
Install
This skill has been flagged as potentially malicious. Review the findings below before installing.
Skills.shDocs
npx skills add https://github.com/microsoft/github-copilot-for-azureAssessments (1)
AI Agent Traps ↗Command Injection via KQL/CLI Generationcriticalcommand execution
The skill generates `az graph query` commands using user intent to construct KQL. This creates a command injection vulnerability if the `extension_cli_generate` tool does not properly sanitize or escape user input, potentially allowing arbitrary shell commands or malicious KQL execution.
90% confidenceline 36
az graph query -q "<KQL>", mcp_azure_mcp_extension_cli_generate intent: "query Azure Resource Graph to <user's request>"
Extensive Azure Resource Reconnaissancelowreconnaissance
The skill's primary function is to list and discover Azure resources across subscriptions and resource groups, providing broad reconnaissance capabilities. While intended, this functionality could be leveraged by an attacker to map out an environment.
100% confidenceline 46
List, find, and discover Azure resources; mcp_azure_mcp_subscription_list; mcp_azure_mcp_group_list
Version History (2)
Badge
Markdown
[](https://mondoo.com/ai-agent-security/skills/github/microsoft/github-copilot-for-azure/azure-resource-lookup)HTML
<a href="https://mondoo.com/ai-agent-security/skills/github/microsoft/github-copilot-for-azure/azure-resource-lookup"><img src="https://mondoo.com/ai-agent-security/api/badge/github/microsoft/github-copilot-for-azure/azure-resource-lookup.svg" alt="Mondoo Skill Check" /></a>Image URL
https://mondoo.com/ai-agent-security/api/badge/github/microsoft/github-copilot-for-azure/azure-resource-lookup.svgSecure your AI agents
Skills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.
- Continuous scanning of skills across all registries
- Policy enforcement before skills reach your agents
- Integration with your existing security workflow