heating the forge...

@forgecat/microsoft-azure_skills-azure-resource-visualizer — Security Risk Report | ForgeCat

microsoft-azure_skills-azure-resource-visualizer

Security risk report for @forgecat/microsoft-azure_skills-azure-resource-visualizer v0.0.4

Low

Profile is attributed to Microsoft and references the official azure-skills GitHub repository (https://github.com/microsoft/azure-skills).
License is MIT and source platform is clearly documented (Claude Code, Cursor, Codex).

Low

The skill describes legitimate Azure resource analysis and Mermaid diagram generation with no instructions to manipulate the AI, ignore instructions, or exfiltrate data.
Guidance on using Azure CLI and MCP tools is standard and security-appropriate; no malicious knowledge poisoning or weakening of security defaults.
The skill explicitly constrains behavior with 'Never Do' rules including read-only analysis and prohibition on modifying/deleting resources.

Details

Findings

Invisible characters detected
skills/azure-resource-visualizer/references/azure-resource-graph.md · SKILL-011

Evidence

'Never Do: ❌ Modify or delete Azure resources (read-only analysis)'
'Important: You must only use placeholder names to represent secret values, such as keys, connection strings, Key Vault secrets, etc.'
No instructions to fetch external URLs, reveal system prompts, or install untrusted dependencies.

Low

The skill requires read-only access to Azure resources (list resource groups, query resources, analyze configurations) aligned with its stated purpose of visualization and analysis.
No file_write, file_delete, or shell execution is declared; file creation is limited to markdown documentation in the workspace.
No excessive or unrelated tool categories are requested.

Details

Evidence

'Modify or delete Azure resources (read-only analysis)' — explicitly read-only
'Use Azure CLI for complex queries not available via MCP' — advisory only, not mandatory
Tool usage is scoped to Azure MCP intents (list, get details) and optional CLI queries for analysis.

Low

No MCP servers are declared in the profile; the skill references optional Azure MCP tools and Azure CLI as advisory patterns.
References to `mcp_azure_mcp_extension_cli_generate` and `extension_cli_generate` are documented as examples for generating safe Azure CLI commands, not hidden instructions.
No arbitrary binary execution, unrestricted network access, or undocumented tool definitions are present.

Details

Evidence

'(none)' in MCP servers section
'Use the `extension_cli_generate` MCP tool to generate `az graph query` commands' — transparent tool usage
All tool patterns are documented with clear intent and examples.