The Agent Skills Directory

[COMMAND_EXECUTION]: The skill and its associated script execute standard Azure CLI (az) and GitHub CLI (gh) commands to manage cloud resources, identity configurations, and repository secrets.
[PRIVILEGE_ESCALATION]: The setup-identity-federation.sh script automates the assignment of broad Azure RBAC roles, specifically Contributor and Azure Kubernetes Service Cluster Admin Role, to a service principal. This is identified as the primary intended function for establishing a high-privilege CI/CD trust relationship between GitHub and Azure.
[INDIRECT_PROMPT_INJECTION]: The skill processes and summarizes output from Azure CLI commands, which may include data from external cloud resources.
Ingestion points: Outputs from commands such as az account, az resource, az aks, and az keyvault defined in SKILL.md.
Boundary markers: The skill employs a structured Markdown output template to isolate command execution details from the summary and validation evidence.
Capability inventory: Extensive resource management capabilities including RBAC assignment, identity creation, and secret management in GitHub.
Sanitization: The instructions include explicit mandates to redact or avoid secret values in all returned output and to verify subscription context before operations.

azure-cli