Security risk report for @forgecat/microsoft-azure_skills-azure-storage v0.0.5
Source Integrity
Low
Profile is sourced from Microsoft's official azure-skills repository (https://github.com/microsoft/azure-skills) with MIT license and documented commit hash, indicating legitimate origin.
Content is standard Azure SDK documentation and best-practices guidance with links to official Microsoft Learn documentation.
Agent Intent
Low
Profile contains no instructions to manipulate the AI, ignore system prompts, exfiltrate credentials, or hide its own instructions.
Content is educational documentation of Azure Storage services, SDK usage, and authentication patterns—no prompt injection, guidance poisoning, or system prompt leakage attempts.
Security guidance (auth-best-practices.md) actively discourages insecure patterns and recommends managed identities; this is defensive, not malicious.
Details
Evidence
All content is descriptive documentation of Azure Storage APIs and best practices.
No instructions to read/exfiltrate ~/.ssh, ~/.aws, .env, or other credentials.
No instructions to fetch external URLs, install remote payloads, or modify system behavior.
Auth guidance explicitly warns: 'Use managed identity for all Azure-hosted apps' and 'Never hardcode credentials, connection strings, or keys'.
Permissions
Low
Profile declares no tools, MCP servers, or file/shell permissions—it is pure documentation.
Content is read-only reference material for Azure Storage SDK usage and authentication patterns.
Details
Evidence
No 'tools' section in profile metadata.
No MCP server definitions.
No file_write, file_delete, shell, or other high/medium-risk tool categories requested.
MCP Risk
Low
Profile declares no MCP servers; all references to `azure__storage` MCP tools are conditional ('When Azure MCP is enabled') and documented as optional fallback to CLI.
No hidden instructions in tool descriptions; MCP references are transparent and point to standard Azure SDK operations (list, get, put).
Details
Evidence
SKILL.md states: 'If Azure MCP is not enabled: Run `/azure:setup` or enable via `/mcp`'—user has explicit control.
MCP tool descriptions are straightforward: 'storage_account_list', 'storage_blob_get', 'storage_blob_put'—no obfuscation or hidden payloads.
ForgeCat