azure-prepare@r1

CAUTION

Publisher claims: "Prepare azd-based Azure projects for deployment: generates azure.yaml, infrastructure (Bicep/Terraform), and Dockerfiles for the Azure Developer CLI (azd) workflow. USE ONLY when the user explicitly wants to use azd as the deployment tool, or the project already has an azure.yaml file. DO NOT USE FOR: non-azd deployments, Python App Service code-only deploys (use python-appservice-deploy), or cross-cloud migration (use azure-cloud-migrate). WHEN: prepare app for azd, create azure.yaml, set up azd infrastructure, modernize app for Azure with azd, deploy with azd, function app, timer trigger, service bus trigger, event-driven function, managed identity, generate Bicep, generate Terraform, create and deploy to Azure." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry skills.shPublisher microsoft · joined 2 days agoInstalls 566KLast detonated 41 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

CRITICAL

Access to sensitive file pathsreferences/sdk/azure-appconfiguration-ts.md:17 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsreferences/runtimes/nodejs.md:31 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsreferences/auth-best-practices.md:101 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Rule modification attemptreferences/global-rules.md:38 · Rule modification attempt — overwriting existing instructions

AST01

CRITICAL

Access to sensitive file pathsreferences/auth-best-practices.md:104 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsreferences/services/app-service/templates/recipes/auth/source/nodejs.md:26 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsreferences/sdk/azd-deployment.md:19 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Rule modification attemptreferences/global-rules.md:5 · Rule modification attempt — overwriting existing instructions

AST01

CRITICAL

Access to sensitive file pathsreferences/auth-best-practices.md:105 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsreferences/recipes/azd/docker.md:99 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsreferences/runtimes/nodejs.md:79 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsreferences/runtimes/nodejs.md:27 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsreferences/services/app-service/templates/recipes/auth/source/nodejs.md:20 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsreferences/services/app-service/templates/recipes/auth/source/nodejs.md:48 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsreferences/auth-best-practices.md:43 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsreferences/runtimes/nodejs.md:68 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Pipe-to-shell patternreferences/sdk/azd-deployment.md:8 · Pipe-to-shell pattern — downloads and immediately executes remote code

AST06

CRITICAL

Access to sensitive file pathsreferences/services/app-service/templates/recipes/auth/source/python.md:38 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

MEDIUM

Remote installer piped to shellreferences/sdk/azd-deployment.md:8 · Remote installer piped to shell

AST07

HIGH

npx invocation of non-well-known packagereferences/recipes/azd/iac-rules.md:25 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packagereferences/recipes/azd/terraform.md:328 · npx invocation of non-well-known package — may execute untrusted code

AST06

CRITICAL

Access to sensitive file pathsreferences/services/app-service/templates/recipes/auth/source/python.md:40 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05