Loading

heating the forge...

@forgecat/microsoft-azure_skills-azure-resource-lookup — Security Risk Report | ForgeCat

microsoft-azure_skills-azure-resource-lookup

Security risk report for @forgecat/microsoft-azure_skills-azure-resource-lookup v0.0.4

Source Integrity

Low

Profile is attributed to Microsoft and references the official azure-skills GitHub repository.
No typosquatted, attacker-controlled, or suspicious package dependencies are introduced.

Agent Intent

Low

Content describes legitimate Azure Resource Graph query patterns and KQL syntax for read-only resource discovery.
No instructions to ignore system prompts, exfiltrate credentials, install remote payloads, or manipulate the agent's behavior.
Documentation is educational and prescriptive for a single, well-scoped purpose (listing/discovering Azure resources).

Details

Findings

Invisible characters detected
skills/azure-resource-lookup/SKILL.md · SKILL-011

Evidence

Profile scope: 'List, find, and show Azure resources across subscriptions or resource groups.'
Constraints section explicitly forbids mutations: '❌ **Never** attempt mutations through ARG (read-only)'
No references to reading ~/.ssh, ~/.aws, .env, or exfiltrating data to external hosts.

Permissions

Low

The skill is designed to execute read-only Azure Resource Graph queries via the `az graph query` CLI command.
No file write, delete, or shell mutation operations are requested; all operations are scoped to querying Azure metadata.
Authority matches the stated function: discovering and listing Azure resources without modification.

Details

Evidence

MCP tools listed are query-only: 'extension_cli_generate', 'mcp_azure_mcp_subscription_list', 'mcp_azure_mcp_group_list'.
Workflow explicitly routes to dedicated MCP tools for single-resource queries and ARG for cross-cutting read-only discovery.
Error handling and constraints reinforce read-only semantics: 'Never attempt mutations through ARG'.

MCP Risk

Low

No MCP servers are declared in the profile; the skill relies on standard Azure CLI (`az graph query`) and existing MCP tool wrappers.
The referenced tools (extension_cli_generate, subscription_list, group_list) are standard Azure query operations with no hidden instructions or arbitrary binary execution.
No unrestricted network access or full filesystem permissions are requested.

Details

Evidence

Profile declares: '(none)' for MCP servers.
Tool descriptions are transparent and limited to Azure Resource Graph query generation and subscription/resource group enumeration.
All operations are scoped to Azure metadata queries with explicit constraints on scope and output.

Evaluation Details

Status: Completed
Checks completed: 4/4
Flagged: 0
Evaluated: 6/12/2026