azure-upgrade@r1

CAUTION

Publisher claims: "Assess and upgrade Azure workloads between plans, tiers, or SKUs, or modernize Azure SDK dependencies in source code. WHEN: upgrade Consumption to Flex Consumption, upgrade Azure Functions plan, change hosting plan, function app SKU, migrate App Service to Container Apps, modernize legacy Azure Java SDKs (com.microsoft.azure to com.azure), migrate Azure Cache for Redis (ACR/ACRE) to Azure Managed Redis (AMR)." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry skills.shPublisher microsoft · joined 2 days agoInstalls 462KLast detonated 33 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

MEDIUM

File type combined with upload actionreferences/services/functions/consumption-to-flex/windows/automation/app-settings.md:117 · File type combined with upload action — agent may exfiltrate local data files

AST07

MEDIUM

File type combined with upload actionreferences/services/functions/consumption-to-flex/windows/automation/deployment-package.md:81 · File type combined with upload action — agent may exfiltrate local data files

AST07

CRITICAL

HTML comment carrying imperative instructions to the agentreferences/languages/java/templates/SUMMARY_TEMPLATE.md:168 · HTML comment carrying imperative instructions to the agent

AST01

MEDIUM

File type combined with upload actionreferences/services/functions/consumption-to-flex/windows/automation/deployment-package.md:96 · File type combined with upload action — agent may exfiltrate local data files

AST07

HIGH

Python subprocess execution detectedreferences/languages/java/scripts/upgrade_bom.py:433 · Python subprocess execution detected

AST05

HIGH

File permission modification commandreferences/languages/java/scripts/upgrade_bom.py:155 · File permission modification command — agent changes file ownership/permissions

AST05

HIGH

Python subprocess execution detectedreferences/languages/java/scripts/upgrade_bom.py:195 · Python subprocess execution detected

AST05

MEDIUM

File type combined with upload actionreferences/services/functions/consumption-to-flex/windows/automation/trigger-safety-and-monitoring.md:62 · File type combined with upload action — agent may exfiltrate local data files

AST07

HIGH

File permission modification commandreferences/languages/java/scripts/upgrade_bom.py:262 · File permission modification command — agent changes file ownership/permissions

AST05