azure-functions

Fail

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: HIGHCREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [CREDENTIALS_UNSAFE]: Hardcoded password found in the Terraform configuration example. This practice is insecure for production environments.
  • Evidence: value = "MySecurePassword123!" in references/azure-functions-with-terraform.md.
  • [REMOTE_CODE_EXECUTION]: Fetches and executes a shell script directly from a Microsoft-owned domain. While the source is trusted, this pattern involves executing remote code.
  • Evidence: curl https://aka.ms/install-artifacts-ubuntu.sh | bash in SKILL.md.
  • [EXTERNAL_DOWNLOADS]: Downloads resources from external locations during setup.
  • Evidence: https://aka.ms/install-artifacts-ubuntu.sh in SKILL.md.
  • [COMMAND_EXECUTION]: Uses system commands to manage infrastructure resources.
  • Evidence: Extensive use of az and func CLI tools in SKILL.md and references/azure-function-creation-with-azure-cli.md.
Recommendations
  • HIGH: Downloads and executes remote code from: https://aka.ms/install-artifacts-ubuntu.sh - DO NOT USE without thorough review
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Sep 16, 2026, 10:44 AM
Security Audit — agent-trust-hub — azure-functions