azure-functions
Fail
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: HIGHCREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [CREDENTIALS_UNSAFE]: Hardcoded password found in the Terraform configuration example. This practice is insecure for production environments.
- Evidence:
value = "MySecurePassword123!"inreferences/azure-functions-with-terraform.md. - [REMOTE_CODE_EXECUTION]: Fetches and executes a shell script directly from a Microsoft-owned domain. While the source is trusted, this pattern involves executing remote code.
- Evidence:
curl https://aka.ms/install-artifacts-ubuntu.sh | bashinSKILL.md. - [EXTERNAL_DOWNLOADS]: Downloads resources from external locations during setup.
- Evidence:
https://aka.ms/install-artifacts-ubuntu.shinSKILL.md. - [COMMAND_EXECUTION]: Uses system commands to manage infrastructure resources.
- Evidence: Extensive use of
azandfuncCLI tools inSKILL.mdandreferences/azure-function-creation-with-azure-cli.md.
Recommendations
- HIGH: Downloads and executes remote code from: https://aka.ms/install-artifacts-ubuntu.sh - DO NOT USE without thorough review
- AI detected serious security threats
Audit Metadata