Skills/Claude Code plugins/azure

azure@1.2.50

CAUTION

Publisher claims: "Transform Claude into an Azure expert. This plugin integrates the Azure MCP server and specialized Azure skills to move beyond generic advice. It enables Claude to perform real-world tasks: listing resources, validating deployments, diagnosing infrastructure issues, and optimizing costs across 50+ Azure services." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry Claude Code plugin marketplacePublisher microsoft · joined 4 days agoInstalls 0Last detonated 3 h ago
Dispute verdict

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-26 and scored it 72/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Prompt injection; Coercive compliance language; npx invocation of non-well-known package. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

CRITICAL
Prompt injectionskills/azure-aigateway/SKILL.md:23 · Prompt injection — known jailbreak technique reference
AST01
HIGH
Coercive compliance languageskills/azure-validate/SKILL.md:56 · Coercive compliance language
AST01
HIGH
npx invocation of non-well-known packageREADME.md:163 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Python subprocess execution detectedskills/entra-agent-id/SKILL.md:136 · Python subprocess execution detected
AST05
CRITICAL
Prompt injectionskills/azure-aigateway/SKILL.md:3 · Prompt injection — known jailbreak technique reference
AST01
HIGH
npx invocation of non-well-known packageREADME.md:220 · npx invocation of non-well-known package — may execute untrusted code
AST06
MEDIUM
File type combined with upload actionskills/azure-app-onboard/prepare/SKILL.md:52 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
npx invocation of non-well-known packageREADME.md:216 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageskills/azure-app-onboard-prereq/SKILL.md:29 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageskills/azure-app-onboard-prereq/SKILL.md:30 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Process kill commandskills/azure-diagnostics/references/app-service/README.md:9 · Process kill command — agent can terminate processes
AST05
MEDIUM
File type combined with upload actionskills/azure-app-onboard/scaffold/SKILL.md:61 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionskills/azure-app-onboard-prereq/SKILL.md:16 · File type combined with upload action — agent may exfiltrate local data files
AST07