Security risk report for @forgecat/microsoft-azure_skills-azure-rbac v0.0.5
Source Integrity
Low
Profile is sourced from Microsoft's official azure-skills repository (https://github.com/microsoft/azure-skills), a trusted first-party vendor.
Distributed via ForgeCat registry with MIT license and clear provenance metadata (commit hash a990650).
Agent Intent
Low
Content provides legitimate Azure RBAC guidance and tool usage instructions without attempting to manipulate the AI into ignoring instructions, exfiltrating data, or leaking system prompts.
Recommends standard Azure best practices (least privilege, built-in roles, custom role definitions) and well-known Microsoft tools (CLI, Bicep) — no poisoned guidance or typosquatted dependencies.
No instructions to fetch external URLs, install untrusted profiles, or weaken security defaults.
Details
Evidence
Tool usage pattern: 'Use the azure__documentation tool to find the minimal role definition' — standard, documented workflow.
Prerequisites section correctly identifies Microsoft.Authorization/roleAssignments/write as the required permission and recommends least-privilege roles.
No hidden instructions, role hijacking, or guidance to bypass security controls.
Permissions
Low
No tool definitions or MCP servers declared in the profile; skill is purely informational and guidance-based.
Instructs use of legitimate Azure CLI and Bicep schema tools for role assignment — authority is scoped to Azure RBAC operations matching the stated purpose.
No shell, file_write, file_delete, or unrestricted network access requested.
Details
Evidence
Declared tools are Azure-specific documentation and schema tools (azure__documentation, azure__bicepschema, azure__get_azure_bestpractices, azure__extension_cli_generate) — all aligned with RBAC role assignment.
No alwaysApply=true rules or glob patterns that would grant blanket authority.
MCP Risk
Low
No MCP servers defined in the profile; skill relies on documented Azure tools and schema references.
Tool descriptions are transparent and tied to legitimate Azure operations (documentation lookup, CLI generation, Bicep schema).
No arbitrary binary execution, hidden instructions in tool descriptions, or unrestricted network/filesystem access.
Details
Evidence
MCP servers section is empty: '(none)'.
Tool references are to standard Azure platform APIs and schema, not external or unknown binaries.
ForgeCat