heating the forge...

@forgecat/microsoft-azure_skills-azure-diagnostics — Security Risk Report | ForgeCat

microsoft-azure_skills-azure-diagnostics

Security risk report for @forgecat/microsoft-azure_skills-azure-diagnostics v0.0.4

Low

Static scanner flagged safe level; profile attributes Microsoft as author with reference to https://github.com/microsoft/azure-skills.
Content is consistent with legitimate Azure diagnostics documentation: troubleshooting guides, KQL queries, and CLI commands for debugging production issues.
No evidence of typosquatted dependencies, attacker-controlled repositories, or supply-chain poisoning.

Low

Content is educational and diagnostic in nature; it documents Azure troubleshooting workflows, common failure patterns, and remediation steps without instructing the AI to perform malicious actions.
References to reading logs, querying metrics, and running diagnostic commands are legitimate operational tasks aligned with the stated purpose (debug Azure production issues).
No instructions to ignore system prompts, exfiltrate credentials, install remote payloads, or weaken security defaults; no guidance poisoning or role hijacking detected.

Details

Findings

Invisible characters detected
skills/azure-diagnostics/references/azure-resource-graph.md · SKILL-011
Invisible characters detected
skills/azure-diagnostics/references/app-service/README.md · SKILL-011
Invisible characters detected
skills/azure-diagnostics/references/functions/README.md · SKILL-011
Invisible characters detected
skills/azure-diagnostics/troubleshooting/aks/networking.md · SKILL-011
Invisible characters detected
skills/azure-diagnostics/troubleshooting/aks/node-issues.md · SKILL-011
Invisible characters detected
skills/azure-diagnostics/troubleshooting/aks/pod-failures.md · SKILL-011
Invisible characters detected
skills/azure-diagnostics/troubleshooting/aks/upgrade-operations.md · SKILL-011
Invisible characters detected
skills/azure-diagnostics/troubleshooting/messaging/azure-eventhubs-java.md · SKILL-011

Evidence

SKILL.md: 'Start with systematic diagnosis flow', 'Use AppLens (MCP) for AI-powered diagnostics', 'Check resource health before deep-diving into logs' — all standard troubleshooting practices.
app-service/README.md: 'Check Kudu logs at https://APP.scm.azurewebsites.net/api/deployments to look for details on build errors' — legitimate diagnostic endpoint access.

Low

No tool definitions or MCP servers are declared in this profile; the content is markdown documentation only.
References to Azure CLI commands (az aks, az webapp, az monitor, kubectl) are read-only diagnostic operations (show, list, logs, describe, query) aligned with the stated troubleshooting purpose.
Remediation commands (scale, update, cordon, drain) are explicitly guarded with warnings and marked as requiring explicit user approval; they are not auto-applied.

Details

Evidence

node-issues.md: '⚠️ **Warning:** These commands are disruptive. By default, stay in read-only diagnostic mode. Only suggest or run them if the user has explicitly requested remediation.'
pod-failures.md: 'Only after explicit user request for remediation and confirmation of workload impact.'
All high-risk operations (delete, cordon, drain, scale, upgrade) are documented as change operations requiring explicit user consent, not automatic actions.

Low

No MCP server definitions are present in this profile; all content is markdown documentation and CLI command examples.
References to hypothetical MCP tools (mcp_azure_mcp_applens, mcp_azure_mcp_monitor, mcp_azure_mcp_aks) are documented as optional diagnostic aids, not embedded malicious servers.
No hidden instructions, arbitrary binary execution, or unrestricted network/filesystem access defined.

Details

Evidence

SKILL.md: 'For AI-powered diagnostics, use: mcp_azure_mcp_applens' — describes tool usage, does not embed or execute it.
aks-mcp.md: 'Use this reference when AKS-aware MCP tools are available in the client' — conditional guidance, not mandatory or hidden.
No tool definitions with alwaysApply=true, globs='**', or shell/file_write/file_delete categories.