The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides instructions and patterns for generating and executing Azure CLI commands, PowerShell scripts, and KQL queries to audit and remediate Azure resource configurations. This is a core functional requirement for cloud management tasks.
[EXTERNAL_DOWNLOADS]: The documentation references official Microsoft domains and GitHub repositories for Azure SDKs and compliance tools. These are well-known technology sources and do not represent a security risk.
[INDIRECT_PROMPT_INJECTION]: The skill possesses an ingestion surface for untrusted data, as it processes metadata and configuration details from Azure resources (e.g., tags and resource names). An attacker with write access to the Azure environment could potentially inject instructions into these fields to influence the agent's reporting, though this is a standard risk for cloud auditing tools.

azure-compliance